CVE-2012-2064

The CVE-2012-2064 vulnerability affects the Drupal Views Language Switcher module (7.x) prior to 7.x-1.2. The issue is an XSS in theme/views_lang_switch.theme.inc that allows remote attackers to inject arbitrary scripts/HTML via the q parameter. Impact is XSS against anonymous users with the vuln...