CVE-2013-1785

Cross-site scripting (XSS) vulnerability in the 3 slide gallery in the Premium Responsive theme before 7.x-1.6 for Drupal allows remote authenticated users with the administer themes permission to inject arbitrary web script or HTML via unspecified vectors.

Date published : 2013-03-27

http://drupal.org/node/1730752

http://drupalcode.org/project/responsive.git/commitdiff/1c6fa91