Beveiligingsadvies
CVE-2008-1133
CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations
Beschrijving
The Drupal.checkPlain function in Drupal 6.0 only escapes the first instance of a character in ECMAScript, which allows remote attackers to conduct cross-site scripting (XSS) attacks.