CVE-2012-2069

CVE-2012-2069 is a CSRF/XSS vulnerability in the Drupal Wishlist module. Affected: Wishlist 6.x-2.x before 6.x-2.6 and 7.x-2.x before 7.x-2.6. Cause: insufficient filtering of user-supplied text from the URL enabling remote attackers to hijack user authentication to trigger cross-site scripting v...