Cross-site scripting (XSS) vulnerability in Organic Groups (OG) Vocabulary 5.x prior to 5.x-1.1 and 6.x prior to 6.x-1.1, a module for Drupal, allows remote malicious users to inject arbitrary web script or HTML via the group title.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
moshe_weitzman og_vocab 5.x-1.0 |
||
moshe_weitzman og_vocab 5.x-1.x-dev |