CVE-2012-4476

CVE-2012-4476 is an XSS vulnerability in the Drupal Drag & Drop Gallery module 6.x. The issue arises in the module’s file handling/uploads logic, with vectors not publicly specified in the provided docs. An advisory notes exploitation exists and that there is no patch; mitigation is to disable an...