CVE-2012-2710

CVE-2012-2710 affects the Zen theme for Drupal (6.x-1.x) prior to 6.x-1.1. When the option “Append the content title to the end of the breadcrumb” is enabled, the breadcrumb can reflect the content title without sufficient filtering, allowing remote attackers to inject arbitrary script or HTML vi...