Description
Cross-site scripting (XSS) vulnerability in Feed Element Mapper module 5.x before 5.x-1.3, 6.x before 6.x-1.3, and 6.x-2.0-alpha before 6.x-2.0-alpha4 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
References
- http://drupal.org/node/636496
- 60288 vdb-entry
- 37060 vdb-entry
- http://drupal.org/node/636518
- 37439 third-party-advisory
- feedelement-unspecified-xss(54338) vdb-entry
- http://drupal.org/node/636498