Mr.Baileys

**Name of the Vulnerable Software and Affected Versions** Link module versions 5.x before 5.x-2.6 Link module versions 6.x before 6.x-2.7 **Description** A cross-site scripting (XSS) issue exists in the "Separate title and URL" formatter of the Link module for Drupal. This allows remote attackers to inject arbitrary web script or HTML via the `link title` field. **Recommendations** For Link module versions 5.x before 5.x-2.6, update to version 5.x-2.6 or later. For Link module versions 6.x before 6.x-2.7, update to version 6.x-2.7 or later.

**Name of the Vulnerable Software and Affected Versions** Userpoints versions prior to 6.x-1.1 **Description** The issue allows remote authenticated users with "View own userpoints" permissions to read the userpoint data of arbitrary users. **Recommendations** For versions prior to 6.x-1.1, update to version 6.x-1.1 or later to resolve the issue.