Name of the Vulnerable Software and Affected Versions:
Drupal Answers module versions 5.x-1.x-dev and possibly other 5.x versions
Description:
A cross-site scripting issue exists, allowing remote attackers to inject arbitrary web script or HTML via a Simple Answer to a question.
Recommendations:
For versions 5.x-1.x-dev and other affected 5.x versions, update to a version that includes a fix for this issue.