Description
Cross-site scripting (XSS) vulnerability in the Automated Logout module 6.x-1.x before 6.x-1.7 and 6.x-2.x before 6.x-2.3 for Drupal allows remote authenticated users with administer autologout privileges to inject arbitrary web script or HTML via unspecified vectors.
References
- 37878 third-party-advisory
- 61295 vdb-entry
- ADV-2009-3633 vdb-entry
- 37462 vdb-entry
- http://drupal.org/node/667094
- http://drupal.org/node/667084
- http://drupal.org/node/667086