Description
Cross-site scripting (XSS) vulnerability in the Currency Exchange module before 6.x-1.2 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to watchdog logging.
References
- 61587 vdb-entry
- 38121 third-party-advisory
- 37649 vdb-entry
- http://drupal.org/node/676214
- http://drupal.org/node/676216
- currency-exchange-watchdog-xss(55453) vdb-entry
- ADV-2010-0063 vdb-entry