| Package | Affected versions | Patched versions |
|---|---|---|
| taxonomy find | = 6.x-1.0= 6.x-1.1= 6.x-1.2= 7.x-1.0 |
Cross-site scripting (XSS) vulnerability in the Taxonomy Find module 6.x-2.x through 6.x-1.2 and 7.x-2.x through 7.x-1.0 in Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via taxonomy vocabulary and term names.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free