CVE-2013-1393

The CVE-2013-1393 entry affects the Drupal CurvyCorners module (versions 6.x-1.x and 7.x-1.x). The root cause is insufficient filtering of user-entered text when rendering the module’s output, enabling Cross-site Scripting (XSS) by remote authenticated users who hold the "administer curvycorners"...