Description
Cross-site scripting (XSS) vulnerability in the Answers module 5.x-1.x-dev and possibly other 5.x versions, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via a Simple Answer to a question.
References
- 31146 vdb-entry
- http://drupal.org/node/310223
- answers-answer-xss(45112) vdb-entry
- ADV-2008-2620 vdb-entry
- 20080912 Drupal Answers Module Contains XSS Vulnerability mailing-list