CVE-2012-5705

Cross-site scripting XSS vulnerability in the settings page admin/settings/hotblocks in the Hotblocks module 6.x-1.x before 6.x-1.8 for Drupal allows remote authenticated users with the "administer hotblocks" permission to inject arbitrary web script or HTML via the "block names."...

CVE-2012-5705

CVE-2012-5705 concerns the Hotblocks Drupal contributed module (6.x-1.x prior to 6.x-1.8). The vulnerability is an XSS in the settings page (admin/settings/hotblocks) caused by insufficient sanitization of the block names input, allowing remote authenticated users with the administer hotblocks pe...

SA-CONTRIB-2012-126 - Hotblocks - Cross Site Scripting (XSS) and Denial of Service (DoS)

The Hotblocks module provides an enhanced GUI for administering blocks and block content that is intended to be simpler and more controllable for less privileged users than the default block administration tools. Cross Site Scripting XSS The module doesn't sufficiently sanitize the user input for...