|
Description
|
|
Multiple vulnerabilities have been identified in Drupal, which could be exploited by remote attackers to execute arbitrary scripting code or disclose sensitive information.
The first issue is caused by input validation errors when handling certain HTML attributes and tags, or escape characters, which could be exploited by malicious users and administrators to cause arbitrary scripting code to be executed by the user's browser in the security context of an affected Web site.
The second vulnerability is caused by an unspecified error which could allow certain information related to form submission to be disclosed.
|
