CVE-2012-2726

The CVE-2012-2726 vulnerability affects Drupal’s Protest module (versions 6.x-1.x prior to 6.x-1.2 and 7.x-1.x prior to 7.x-1.2). It is a cross-site scripting (XSS) flaw caused by insufficient sanitization of user input in the protest_body parameter, exploitable by remote authenticated users who ...