Drupal · Drupal · CVE-2008-0576
**Name of the Vulnerable Software and Affected Versions**
Drupal versions 5.x-2.x-dev before 20080130
Drupal versions 5.x-1.2 and earlier
Drupal versions 4.7.x-2.6 and earlier
Drupal versions 4.7.x-1.6 and earlier
**Description**
A cross-site scripting (XSS) issue allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors that write to summary table pages.
**Recommendations**
For versions 5.x-2.x-dev, update to a version after 20080130.
For versions 5.x-1.x, update to a version later than 5.x-1.2.
For versions 4.7.x-2.x, update to a version later than 4.7.x-2.6.
For versions 4.7.x-1.x, update to a version later than 4.7.x-1.6.