Description
Cross-site scripting (XSS) vulnerability in the Sections module 5.x before 5.x-1.3 and 6.x before 6.x-1.3 for Drupal allows remote authenticated users with "administer sections" privileges to inject arbitrary web script or HTML via a section name (aka the Name field).
Affected products
- alexander_hass / sections_module5.x-1.0 – 5.x-1.0
- alexander_hass / sections_module5.x-1.1 – 5.x-1.1
- alexander_hass / sections_module5.x-1.2 – 5.x-1.2
- alexander_hass / sections_module5.x-1.x-dev – 5.x-1.x-dev
- alexander_hass / sections_module6.x-1.0 – 6.x-1.0
- alexander_hass / sections_module6.x-1.1 – 6.x-1.1
- alexander_hass / sections_module6.x-1.2 – 6.x-1.2
- alexander_hass / sections_module6.x-1.x-dev – 6.x-1.x-dev