Description
Cross-site scripting (XSS) vulnerability in Brilliant Gallery 5.x before 5.x-4.2, a module for Drupal, allows remote authenticated users with permissions to inject arbitrary web script or HTML via unspecified vectors related to posting of answers.
References
- brilliantgallery-unspecified-xss(45636) vdb-entry
- 32106 third-party-advisory
- http://drupal.org/node/315919
- 31554 vdb-entry