Description
Cross-site scripting (XSS) vulnerability in the Gallery Assist module 6.x before 6.x-1.7 for Drupal allows remote attackers to inject arbitrary web script or HTML via node titles.
References
- 37061 vdb-entry
- 60270 vdb-entry
- gallery-assist-title-xss(54347) vdb-entry
- 37425 third-party-advisory
- http://drupal.org/node/636488
- http://drupal.org/node/636660