CVE-2014-9740

CVE-2014-9740 concerns the Drupal contributed module Rules Link (7.x-1.x) , affected up to version 7.x-1.0 before 7.x-1.1 . The vulnerability arises from insufficient sanitization of the question and description strings in a triggering Rules link confirmation form, allowing remote authenticated u...