CVE-2013-2036

CVE-2013-2036 is a reflected Cross-Site Scripting (XSS) vulnerability in the Drupal Filebrowser module (6.x-2.x) prior to 6.x-2.2. The issue arises from insufficient sanitization when presenting lists of files, allowing an attacker to inject arbitrary script/HTML. The Drupal security advisory not...