CVE-2010-1584

Name of the Vulnerable Software and Affected Versions Drupal Context module versions prior to 6.x-2.0-rc4

Description A cross-site scripting (XSS) issue exists, allowing remote authenticated users with Administer Blocks privileges to inject arbitrary web script or HTML via a block description.

Recommendations For versions prior to 6.x-2.0-rc4, update to version 6.x-2.0-rc4 or later to resolve the issue. As a temporary workaround, consider restricting access to block descriptions for users with Administer Blocks privileges until the update is applied.