Drupal up to 7.38 Ajax Handler a Tag cross site scripting

No description provided by source...