CVE

Id
31250  
CVE No.
CVE-2008-1133  
Status
Candidate  
Description
The Drupal.checkPlain function in Drupal 6.0 only escapes the first instance of a character in ECMAScript, which allows remote attackers to conduct cross-site scripting (XSS) attacks.  
Phase
Assigned (20080304)  
Votes
None (candidate not yet proposed)  
Comments