Application: Drupal
Affected Version: versions for Drupal 5.x prior to 5.x-1.4
Vendor’s URL: TrailScout Module
Bug Type: Cross-Site Scripting and SQL Injection
Risk Level: Critical

Solution:
Update to version 5.x-1.4.

Content Management, Cross Site Scripting, SQL Injection