Description
Cross-site scripting (XSS) vulnerability in the upload module (upload.module) in Drupal 4.6.x before 4.6.8 and 4.7.x before 4.7.2 allows remote attackers to inject arbitrary web script or HTML via the uploaded filename.
Remediation
References
Related Vulnerabilities
Oracle Application Server CVE-2008-2589 Vulnerability (CVE-2008-2589)
MySQL CVE-2014-2450 Vulnerability (CVE-2014-2450)
WordPress Plugin Another WordPress Classifieds Cross-Site Scripting (3.3.1)
WordPress Plugin Button Widget Smartsoft Cross-Site Request Forgery (1.0.1)
WordPress Plugin Widget for Facebook Page Feeds Cross-Site Scripting (5.0)