Description
Multiple cross-site scripting (XSS) vulnerabilities in the Lingotek module 6.x-1.x before 6.x-1.40 for Drupal allow remote authenticated users to inject arbitrary web script or HTML when (1) creating or (2) editing page content.
References
- lingotek-createedit-xss(72151) vdb-entry
- http://drupal.org/node/1394220
- [oss-security] 20120406 CVE's for Drupal Contrib 2012 001 through 057 (67 new CVE assignments) mailing-list
- 47453 third-party-advisory
- 51272 vdb-entry
- http://drupal.org/node/1394412
- 78185 vdb-entry