Description
Multiple cross-site scripting (XSS) vulnerabilities in the Maestro module 7.x-1.x before 7.x-1.4 for Drupal allow remote authenticated users with certain permissions to inject arbitrary web script or HTML via a (1) Role or (2) Organic Group name.
References
- https://www.drupal.org/node/2013653
- 56790 third-party-advisory
- https://drupal.org/node/2200453
- maestro-drupal-xss(91274) vdb-entry
- 65677 vdb-entry