Description
Cross-site scripting (XSS) vulnerability in the Node Hierarchy module 5.x before 5.x-1.3 and 6.x before 6.x-1.3, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via a child node title.
References
- node-hierarchy-titles-xss(54146) vdb-entry
- 59674 vdb-entry
- 37284 third-party-advisory
- http://drupal.org/node/622100
- 37071 vdb-entry
- http://drupal.org/node/622092
- http://drupal.org/node/623490