Description
Multiple cross-site scripting (XSS) vulnerabilities in the Agreement module 6.x before 6.x-1.2 for Drupal allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
References
- 37437 third-party-advisory
- http://drupal.org/node/636568
- http://drupal.org/node/631538
- 37057 vdb-entry
- agreement-unspecified-xss(54342) vdb-entry
- 60274 vdb-entry