Description
Cross-site scripting (XSS) vulnerability in the Ajax system in Drupal 7.x before 7.29 allows remote attackers to inject arbitrary web script or HTML via vectors involving forms with an Ajax-enabled textfield and a file field.
Remediation
References
Related Vulnerabilities
Jenkins Deserialization of Untrusted Data Vulnerability (CVE-2017-2608)
WordPress Plugin DELUCKS SEO Unspecified Vulnerability (1.2.2)
WordPress Plugin YITH WooCommerce Multi-step Checkout Security Bypass (1.7.4)
Ruby on Rails Improper Authentication Vulnerability (CVE-2012-3424)
WordPress Plugin Sync to Etsy Marketplace from WooCommerce Cross-Site Request Forgery (3.3.1)