Description
Cross-site scripting (XSS) vulnerability in the Shoutbox module for Drupal 5.x before Shoutbox 5.x-1.1 allows remote authenticated users to inject arbitrary web script or HTML via Shoutbox block messages.
References
- 27953 third-party-advisory
- 39053 vdb-entry
- drupal-shoutbox-unspecified-xss(38885) vdb-entry
- 26736 vdb-entry
- http://drupal.org/node/198163