Drupal Hierarchical Select Module Multiple Unspecified HTML Injection Issues

23 July 2010
Bookmark and Share
Hierarchical Select is a module for the Drupal content manager that provides a "hierarchical_select" form element. The module is exposed to multiple HTML injection issues because it fails to properly sanitize certain unspecified user-supplied input before using it in dynamically generated content. Hierarchical Select versions prior to 5.x-3.2 and 6.x-3.2 are affected.

Ref: http://drupal.org/node/847488

10.29.100 - CVE: Not Available
Platform: Web Application