CVE-2012-1632

CVE-2012-1632 affects the Drupal Password Policy module. The vulnerability is a cross-site scripting (XSS) flaw in password_policy.admin.inc that allows remote authenticated users with the administer policies permission to inject arbitrary web script or HTML via the name parameter. Affected versi...