Cross-Site Scripting Vulnerability for Flag Content Module Versions Prior to 5.x-2.10
Drupal® is a popular open-source content management system that is developed and supported by a community of users. The Flag Content module lets users flag offensive content for an administrator to review.
Affected Application: Flag Content 5.x-2.x through 5.x-2.9
Issue: On 09/13/11, a cross-site scripting vulnerability was reported for Flag Content version 5.x-2.x through 5.x-2.9. The vulnerability lets attackers execute scripts to steal cookies or perform other malicious actions.
Resolution: An update for Flag Content is available. For more information, visit the vendor's website: http://drupal.org/project/flag_content.
This information was compiled using information in the National Vulnerability Database. For more information about this issue, see the summary for CVE-2009-5096. To learn more about cross-site scripting vulnerabilities, see Cross-Site Scripting.
Website Protection Site Scanner scans for this vulnerability, and many more. To learn about Site Scanner, see Getting Started with Website Protection Site Scanner.