CVE-2009-3915

CVE-2009-3915 affects the Drupal Link module’s “Separate title and URL” formatter. The root cause is a cross-site scripting (XSS) vulnerability in the link title field, enabling remote attackers to inject arbitrary script/HTML. Affected versions are 5.x prior to 5.x-2.6 and 6.x prior to 6.x-2.7. ...