CVE-2008-5999 Information

Description

Cross-site scripting (XSS) vulnerability in the Ajax Checklist module 5.x before 5.x-1.1 for Drupal allows remote authenticated users with create and edit permissions for posts to inject arbitrary web script or HTML via unspecified vectors involving the ajax_checklist filter.

Reference

http://drupal.org/node/312968 http://secunia.com/advisories/32009 https://exchange.xforce.ibmcloud.com/vulnerabilities/45412