XSS and AoF vulnerabilities in Drupal

0
40

Posted by MustLive on Jun 24

Hello list!

I want to warn you about Cross-Site Scripting and Abuse of Functionality
vulnerabilities in Drupal.

————————-
Affected products:
————————-

Vulnerable are Drupal 6.22 and previous versions. Taking into account that
developers didn't fixed these holes, then versions 7.x also must be
vulnerable.

———-
Details:
———-

XSS (WASC-08):

At adding or editing of data in any internal forms…

Source: XSS and AoF vulnerabilities in Drupal