Drupal · Drupal Crmngp Module · CVE-2009-3919
**Name of the Vulnerable Software and Affected Versions**
Drupal crmngp module versions prior to 6.x-1.12
**Description**
A cross-site scripting issue exists, allowing remote attackers to inject arbitrary web script or HTML via user-supplied information.
**Recommendations**
For versions prior to 6.x-1.12, update to version 6.x-1.12 or later to resolve the issue.