PT-2015-6554

Name of the Vulnerable Software and Affected Versions Drupal Image Title module versions prior to 7.x-1.1 Description A cross-site scripting XSS issue exists, allowing remote authenticated users with specific permissions to inject arbitrary web script or HTML. Recommendations For versions prior t...

Multiple Cross-Site Scripting Vulnerabilities in Drupal Image Title Module

Drupal is a developmental CMF Content Management Framework written in the PHP language. Multiple cross-site scripting vulnerabilities exist in the Drupal Image Title module. Because the application fails to properly filter user-supplied input, an attacker could exploit the vulnerabilities to...