CVE-2014-8376

The CVE-2014-8376 entry applies to the Drupal Site Banner module (7.x) prior to 7.x-4.1. Affected component is the context administration sub-panel; the root cause is insufficient sanitization of existing context settings, exposing a Cross-Site Scripting (XSS) vulnerability. Remote authenticated ...