Description
Cross-site scripting (XSS) vulnerability in Drupal 6.0 allows remote authenticated users to inject arbitrary web script or HTML via titles in content edit forms.
References
- http://drupal.org/node/227608
- 29118 third-party-advisory
- 28026 vdb-entry