5.x.1.x.dev

DATE	CVE	VULNERABILITY TITLE	RISK
2009-08-13	CVE-2008-6972	Cross-Site Scripting vulnerability in multiple products Multiple cross-site scripting (XSS) vulnerabilities in Drupal Content Construction Kit (CCK) 5.x through 5.x-1.8 allow remote authenticated users with "administer content" permissions to inject arbitrary web script or HTML via the (1) "field label," (2) "help text," or (3) "allowed values" settings. network drupal karen-stevenson yves-chedemois CWE-79	3.5