CVE-2012-2717

The CVE-2012-2717 issue affects Drupal via the Mobile Tools module (6.x-2.x) prior to 6.x-2.3. It enables cross-site scripting (XSS) by unsafely displaying user-supplied values in the General configuration page (Mobile URL field, Desktop URL field) or the Mobile Tools block message options. The r...