Drupal vCard Module Cross-Site Scripting

vCard is a PHP-based module for the Drupal content manager. The vCard module is exposed to a cross site scripting issue because it fails to properly sanitize user-supplied input before using it in dynamically generated content. The issue occurs when the "theme_vcard()" function is added to a theme and default content from the vCard module is output. vCard versions 6.x earlier to 6.x-1.3 and vCard versions 5.x earlier to 5.x-1.4 are affected by this issue.

Ref: http://drupal.org/node/610996

09.44.77 - CVE: Not Available
Platform: Web Application - Cross Site Scripting