• info
• discussion
• exploit
• solution
• references

Drupal Webform Module HTML Injection and Information Disclosure Vulnerabilities

An attacker can use standard tools to exploit these issues.