EUVD-2012-1634

Malware in sbrugna...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the Lingotek module 6.x-1.x before 6.x-1.40 for Drupal allow remote authenticated users to inject arbitrary web script or HTML when 1 creating or 2 editing page content...

CVE-2012-1624

The Drupal Lingotek module (6.x-1.x) is affected by XSS vulnerabilities in the content creation/editing workflow due to insufficient sanitization. Versions prior to Lingotek 6.x-1.40 allow remote authenticated users to inject arbitrary scripts/HTML when creating or editing node content. The issue...