CVE-2015-4377

CVE-2015-4377 describes a Cross-site scripting (XSS) vulnerability in the Drupal Petition module (6.x-1.x) prior to 6.x-1.3. The issue affects the module’s administration pages and can be triggered by remote authenticated users who have the create petition permission, allowing injection of arbitr...