Drupal Activity 6.x XSS Proof Of Concept

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Exploit for bespoke: Install and enable the Activity and Flag modules Add a new Flag with an arbitrary name at ?q=admin/build/flags/add On the resulting page ?q=admin/build/flags/add/node/name enter "alert'xss';" for the flag Title View the rendered...