CVE-2014-8076

The CVE-2014-8076 entry concerns the Professional Theme for Drupal 7.x (before 7.x-2.04). The vulnerability is an XSS flaw in theme settings related to custom copyright information, exploitable by remote authenticated users who have the administer themes permission. Impact is that arbitrary scrip...