Application: Drupal
Affected Version: Content Construction Kit (CCK) (third-party module) 4.7.x, 5.x
Vendor’s URL: http://drupal.org/
Bug Type: Cross site Scripts Injection
Risk Level: Critical
Solution:
- Install the latest CCK release corresponding to your Drupal version :
* CCK 4.7.x-1.6.
* CCK 5.x-1.6.
0 Responses to “Drupal Content Construction Kit Nodereference Module XSS”