Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the Scald module 7.x-1.x before 7.x-1.1 for Drupal allow remote attackers to inject arbitrary web script or HTML via the 1 flashuri, 2 flashwidth, or 3 flashheight in the scaldflashscaldprerender function in...

PT-2013-4886

Name of the Vulnerable Software and Affected Versions Scald module versions 7.x-1.x before 7.x-1.1 Description The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via the flash uri, flash width, or flash height in the scald flash scald prerender function...