EUVD-2012-2332

Malware in sbrugna...

Cross site scripting

Cross-site scripting XSS vulnerability in the Glossary module 6.x-1.x before 6.x-1.8 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to "taxonomy information."...

CVE-2012-2339

Cross-site scripting XSS vulnerability in the Glossary module 6.x-1.x before 6.x-1.8 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to "taxonomy information."...