* Advisory ID: DRUPAL-SA-2006-011
* Project: Drupal core
* Date: 2006-Aug-2
* Security risk: less critical
* Impact: Drupal core
* Exploitable from: remote
* Vulnerability: cross-site scripting

Подробности: http://drupal.org/node/76748