CVE-2009-3648

CVE-2009-3648 concerns a Cross-site scripting (XSS) vulnerability in the Drupal module Service Links 6.x-1.0. The issue allows remote authenticated users (with 'administer content types' permissions) to inject arbitrary script/HTML when displaying content type names, via unspecified vectors. The ...