CVE-2007-6298

CVE-2007-6298 : A cross-site scripting (XSS) vulnerability exists in the Shoutbox module for Drupal 5.x through 5.x-1.1, allowing remote authenticated users to inject arbitrary web script or HTML via Shoutbox block messages. Impact is limited to pages rendering the affected block; the issue is du...