Antonio Ospite

**Name of the Vulnerable Software and Affected Versions** Drupal Internationalization module versions prior to 6.x-1.4 **Description** The issue allows remote authenticated users with specific privileges to inject arbitrary web script or HTML. This can be achieved through strings used in block translation or the untranslated input. **Recommendations** For versions prior to 6.x-1.4, update the Internationalization module to version 6.x-1.4 or later to resolve the issue.