CVE-2014-1611

CVE-2014-1611 affects Drupal’s Anonymous Posting module (7.x-1.2 and 7.x-1.3). The vulnerability stems from insufficient sanitization of the name field when anonymous users submit content, allowing remote attackers to inject arbitrary JavaScript/HTML via the contact name. Drupal core is not affec...