CVE:CVE-2009-1249
CNNVD:CNNVD-200904-115
Drupal Feed element mapper模块5.x-1.1之前的5.x版本存在跨站脚本攻击漏洞。远程攻击者可以借助admin/content/node-type/nodetype/map中的内容标题，注入任意的web脚本或HTML。
solution:Upgrade drupal feedapi_mapper to a higher version than 5.x-1.0,5.x-1.0:beta1,5.x-1.0:beta2,5.x-1.0:beta3,5.x-1.0:beta4,5.x-1.0:beta5,5.x-1.0:beta6,5.x-1.0:beta7,5.x-1.x:dev,and avoid the version 5.x-1.0,5.x-1.0:beta1,5.x-1.0:beta2,5.x-1.0:beta3,5.x-1.0:beta4,5.x-1.0:beta5,5.x-1.0:beta6,5.x-1.0:beta7,5.x-1.x:dev