CVE-2012-6572

The CVE-2012-6572 vulnerability affects the Drupal Inf08 theme (6.x-1.x) prior to 6.x-1.10, where the function phptemplate_preprocess_node in template.php is exploitable. The issue allows remote authenticated users who have the administer taxonomy permission to inject arbitrary web script or HTML...