Cross-Site Scripting (XSS)

drupal is vulnerable to cross-site scripting XSS attacks. Since the filterXss function does not filter HTML-encoded data attributes, it allows attackers to inject and execute malicious web script through it...