CVE-2012-2309

Summary of CVE-2012-2309 (Drupal Glossify module) : The vulnerability is a cross-site scripting (XSS) flaw in the Glossify Internal Links Auto SEO contributed module for Drupal 6.x-2.5 and earlier. It allows remote authenticated users with certain roles to inject arbitrary web script or HTML via ...