Description
Cross-site scripting (XSS) vulnerability in the Recipe module (recipe.module) before 1.54 for Drupal 4.6 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
References
- http://drupal.org/node/77753
- ADV-2006-3202 vdb-entry
- 21381 third-party-advisory
- http://drupal.org/node/77538
- recipe-unspecified-xss(28490) vdb-entry
- 19422 vdb-entry