CVE-2014-8765

CVE-2014-8765 affects the Drupal Project Issue File Review (PIFR) module 6.x-2.x prior to 6.x-2.17. The vulnerability is Cross-Site Scripting (XSS) via a crafted patch that causes PIFR client test results to be sent to the PIFR_Server test results page, and an additional vector where remote authe...