CVE-2012-2068

The Drupal Fancy Slide module (6.x, prior to 6.x-2.7) is affected by XSS in fancy_slide.module. The issue arises from insufficient filtering of user-supplied text in node_title and nodequeue_title parameters, exploitable by remote authenticated users with the administer fancy_slide permission. Im...