CVE-2014-7978

The CVE-2014-7978 entry concerns the Bluemasters (BlueMasters) Drupal 7.x-2.x theme. The vulnerability is a stored/reflected XSS caused by insufficient sanitization of theme settings, allowing remote authenticated users with the administer themes permission to inject arbitrary script/HTML via the...