Description
Cross-site scripting (XSS) vulnerability in Drupal 5.x before 5.17 and 6.x before 6.11, as used in vbDrupal before 5.17.0, allows remote attackers to inject arbitrary web script or HTML via crafted UTF-8 byte sequences before the Content-Type meta tag, which are treated as UTF-7 by Internet Explorer 6 and 7.
Remediation
References
Related Vulnerabilities
MySQL CVE-2015-0432 Vulnerability (CVE-2015-0432)
WordPress Plugin Custom Banners Cross-Site Scripting (1.2.2.2)
WordPress Plugin WP Ultimate Recipe Cross-Site Scripting (3.12.6)
WordPress Plugin WP Maps-Display Google Maps Perfectly with Ease SQL Injection (4.1.4)
Jenkins Incorrect Authorization Vulnerability (CVE-2018-1999004)