Some vulnerabilities have been reported in the Taxonomy Image module for Drupal, which can be exploited by malicious people to conduct cross-site scripting attacks.

Certain unspecified input is not properly sanitised before being returned to a user. This can be exploited to execute arbitrary HTML and script code in a user's browser session in context of an affected site.

The vulnerabilities are reported in versions prior to 5.x-1.3 and 6.x-1.3.

Solution
Update to version 5.x-1.3 or 6.x-1.3.
Further details available in Customer Area

Provided and/or discovered by
The vendor credits Owen Barton.

Changelog
Further details available in Customer Area

Original Advisory
SA-2008-033:
http://drupal.org/node/269389

Deep Links
Links available in Customer Area