EUVD-2012-4397

Malware in sbrugna...

CVE-2012-4468

Summary: CVE-2012-4468 is a cross-site scripting (XSS) vulnerability in the Drupal Privatemsg module. Affected software: Privatemsg 7.x-1.x before 7.x-1.3. Root cause: insufficient sanitization of the user name when creating private messages. Impact: remote attackers can inject arbitrary web scri...