Justin Klein Keane

A cross-site scripting (XSS) issue exists, allowing remote authenticated users with Administer Blocks privileges to inject arbitrary web script or HTML via a block description.

A cross-site scripting (XSS) issue exists in the term data detail page of the Taxonomy manager module for Drupal. This allows remote authenticated users with specific privileges to inject arbitrary web script or HTML via the "Parent and related terms" field.

Name of the Vulnerable Software and Affected Versions: Drupal Answers module versions 5.x-1.x-dev and possibly other 5.x versions Description: A cross-site scripting issue exists, allowing remote attackers to inject arbitrary web script or HTML via a Simple Answer to a question. Recommendations: For versions 5.x-1.x-dev and other affected 5.x versions, update to a version that includes a fix for this issue.

The issue is related to a cross-site scripting (XSS) vulnerability. This allows remote authenticated users to inject arbitrary web script or HTML via the `Link page header` field.