CVE-2013-4138

The CVE-2013-4138 entry applies to the Hatch theme (Drupal 7.x-1.x) prior to 7.x-1.4. The vulnerability is an XSS flaw that can be triggered by remote authenticated users who have Administer content, Create new article, or Edit any article type content permissions, allowing injection of arbitrary...