PT-2012-3392

Name of the Vulnerable Software and Affected Versions Vote Up/Down module versions 6.x-2.x before 6.x-2.8 Vote Up/Down module versions 6.x-3.x before 6.x-3.1 Description The issue allows remote authenticated users to inject arbitrary web script or HTML via taxonomy terms, which is a result of a...