CVE-2012-2082

Cross-site scripting XSS vulnerability in the Chaos tool suite aka CTools module 7.x-1.x before 7.x-1.0 for Drupal allows remote authenticated users with the post comments permission to inject arbitrary web script or HTML via a user signature...

CVE-2012-2082

Cross-site scripting XSS vulnerability in the Chaos tool suite aka CTools module 7.x-1.x before 7.x-1.0 for Drupal allows remote authenticated users with the post comments permission to inject arbitrary web script or HTML via a user signature...

CVE-2012-2082

The CVE-2012-2082 issue affects the Chaos Tool Suite (ctools) Drupal module 7.x-1.x prior to 7.x-1.0. The root cause is that the module did not properly filter user signatures when rendering comments, allowing remote authenticated users with the post comments permission to inject arbitrary web sc...