Description
Multiple cross-site scripting (XSS) vulnerabilities in the Ubercart 5.x before 5.x-1.0-beta7 module for Drupal allow remote attackers to inject arbitrary web script or HTML via a text attribute value for a product.
References
- http://drupal.org/node/233492
- ADV-2008-0867 vdb-entry
- ubercart-attribute-xss(41184) vdb-entry