CVE-2015-4369

The CVE-2015-4369 entry relates to a Cross‑Site Scripting (XSS) vulnerability in the Drupal Trick Question module. Affected software: Trick Question module for Drupal 6.x (versions prior to 6.x-1.5) and Drupal 7.x (prior to 7.x-1.5). Root cause: the module does not sufficiently sanitize user‑subm...