Description
Cross-site scripting (XSS) vulnerability in the Meta tags quick module 7.x-2.x before 7.x-2.3 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via unspecified vectors, probably related to "names of entity bundles."
References
- metatagsquick-unspecified-xss(71845) vdb-entry
- 47249 third-party-advisory
- 77740 vdb-entry
- http://drupal.org/node/1370878
- http://drupal.org/node/1370934