Description
Multiple cross-site scripting (XSS) vulnerabilities in Drupal 6.x before 6.3 allow remote attackers to inject arbitrary web script or HTML via vectors related to (1) free tagging taxonomy terms, which are not properly handled on node preview pages, and (2) unspecified OpenID values.
Remediation
References
Related Vulnerabilities
WordPress Plugin AccessPress Social Icons Multiple Cross-Site Scripting Vulnerabilities (1.5.5)
PostgreSQL Arbitrary Code Execution Vulnerbality (CVE-2020-25696)
WordPress Plugin Bongolive SMS Cross-Site Scripting (1.0.5)
Apache Traffic Server CVE-2023-30631 Vulnerability (CVE-2023-30631)
WordPress Plugin All-In-One Security (AIOS)-Security and Firewall Cross-Site Request Forgery (3.8.9)