CVE-2010-1362

CVE-2010-1362 is an XSS vulnerability in the Drupal Own Term module 6.x-1.0. Remote authenticated users with "create additional terms" privileges can inject arbitrary script or HTML via the term description field on a term listing page. Impact is partial on integrity (XSS) with no confidentiality...