CVE-2014-1611

CVE-2014-1611 affects Drupal’s Anonymous Posting module (7.x-1.2 and 7.x-1.3). The vulnerability stems from insufficient sanitization of the name field when anonymous users submit content, allowing remote attackers to inject arbitrary JavaScript/HTML via the contact name. Drupal core is not affec...

PT-2014-4256

Name of the Vulnerable Software and Affected Versions Drupal Anonymous Posting module versions 7.x-1.2 through 7.x-1.3 Description A cross-site scripting issue exists, allowing remote attackers to inject arbitrary web script or HTML via the contact name field. Recommendations For versions 7.x-1.2...