Drupal Multiple Script Insertion Vulnerabilities

Application: Drupal
Affected Version: 6.0 and other versions.
Vendor’s URL: http://drupal.org/
Bug Type: Cross Site Scripting
Risk Level: Critical

Solution:
Update to version 6.1.