CVE-2012-2083

This CVE-2012-2083 describes an XSS vulnerability in Drupal’s Fusion module (fusion_core/template.php, function fusion_core_preprocess_page) before version 6.x-1.13. The issue allows remote attackers to inject arbitrary script/HTML via the q parameter. Affected software is the Fusion module for D...