EUVD-2012-2691

Malware in sbrugna...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the Taxonomy List module 6.x-1.x before 6.x-1.4 for Drupal allow remote authenticated users with create or edit taxonomy terms permissions to inject arbitrary web script or HTML via vectors related to taxonomy information...

CVE-2012-2711

The CVE-2012-2711 issue concerns Drupal’s Taxonomy List module (6.x-1.x) with cross-site scripting (XSS) vulnerabilities. The vulnerability arises because the module does not sufficiently sanitize user-supplied text in taxonomy information, enabling remote authenticated users who have create or e...