CVE-2009-2373

Cross-site scripting (XSS) vulnerability in the Forum module in Drupal 6.x before 6.13 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Date published : 2009-07-08

http://drupal.org/node/507572

http://osvdb.org/55524