This module enables you to create forms to collect information from users and report, analyze and distribute it by email.
The 7.x-3.x module doesn't sufficiently sanitize token values taken from query strings. If a query string token is used as the value of a markup component, an attacker can inject JavaScript into a page.
This module extends access handling of Drupal Core's Taxonomy module.
The module doesn't sufficiently check,
if a given entity should be access controlled, defaulting to allowing access even to unpublished Taxonomy Terms.
if certain administrative routes should be access controlled, defaulting to allowing access even to users without permission to access these administrative routes.
The Smart Trim module allows site builders additional control with text summary fields.
The module doesn't sufficiently filter text when certain options are selected.
This vulnerability is mitigated by the fact that an attacker must have a role with the ability to create content on the site when certain options are selected for the trimmed output.
