CVE-2014-1611

Name of the Vulnerable Software and Affected Versions Drupal Anonymous Posting module versions 7.x-1.2 through 7.x-1.3

Description A cross-site scripting issue exists, allowing remote attackers to inject arbitrary web script or HTML via the contact name field.

Recommendations For versions 7.x-1.2 and 7.x-1.3, consider disabling the Anonymous Posting module until a patch is available. Restrict access to the contact name field to minimize the risk of exploitation.