CVE-2009-4043

CVE-2009-4043 is a cross-site scripting (XSS) vulnerability in the Drupal AddToAny module (5.x before 5.x-2.4 and 6.x before 6.x-2.4). An attacker can inject arbitrary web script or HTML via a node title. root cause is insufficient input sanitization in the AddToAny integration, enabling script e...

CVE-2012-2072

The CVE-2012-2072 issue affects the Drupal Share Buttons (AddToAny) module (6.x-3.x series) prior to version 6.x-3.4. The root cause is improper sanitization of user-provided data, enabling cross-site scripting (XSS) by remote authenticated users who have the administer addtoany permission. Impac...