CVE-2012-2339

The CVE-2012-2339 entry concerns Drupal’s contributed Glossary module (versions 6.x-1.x prior to 6.x-1.8). Root cause: insufficient sanitization of taxonomy information in the glossary indicator feature, enabling Cross-Site Scripting (XSS) via unspecified vectors. Impact is XSS vulnerability for ...