| Package | Affected versions | Patched versions |
|---|---|---|
| ownterm | = 6.x-1.0 |
Cross-site scripting (XSS) vulnerability in the Own Term module 6.x-1.0 for Drupal allows remote authenticated users, with "create additional terms" privileges, to inject arbitrary web script or HTML via the term description field in a term listing page.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free