Description
Cross-site scripting (XSS) vulnerability in the Webform module 6.x-3.x before 6.x-3.19 for Drupal allows remote authenticated users with the "edit own webform content" or "edit all webform content" permissions to inject arbitrary web script or HTML via a component label.
References
- 60218 vdb-entry
- https://drupal.org/node/2007460
- https://drupal.org/node/2007390
- 93749 vdb-entry
- drupal-webform-cve20132129-label-xss(84628) vdb-entry
- 53184 third-party-advisory