CVE-2012-2117

The CVE concerns the Gigya - Social optimization module for Drupal 6.x (prior to 6.x-3.2). The vulnerability arises from insufficient escaping of URL elements printed back to the user, enabling cross-site scripting (XSS). Affected software is the Gigya module for Drupal 6.x versions before 6.x-3....