CVE:CVE-2009-3914
CNNVD:CNNVD-200911-084
Drupal Temporary Invitation模块5.x-2.3之前的5.x版本中存在跨站脚本攻击漏洞。远程攻击者可以借助邀请中的名字字段，注入任意的web脚本或HTML。
solution:Upgrade wolfgang_ziegler temporary_invitation to a higher version than 5.x-1.0,5.x-1.1,5.x-1.2,5.x-1.3,5.x-1.4,5.x-1.5,5.x-1.6,5.x-1.7,5.x-1.8,5.x-1.9,5.x-1.10,5.x-1.x-dev,5.x-2.0,5.x-2.0:rc1,5.x-2.0:rc2,5.x-2.0:rc3,5.x-2.0:rc4,5.x-2.0:rc5,5.x-2.0:rc6,5.x-2.0:rc7,5.x-2.1,5.x-2.2,and avoid the version 5.x-1.0,5.x-1.1,5.x-1.2,5.x-1.3,5.x-1.4,5.x-1.5,5.x-1.6,5.x-1.7,5.x-1.8,5.x-1.9,5.x-1.10,5.x-1.x-dev,5.x-2.0,5.x-2.0:rc1,5.x-2.0:rc2,5.x-2.0:rc3,5.x-2.0:rc4,5.x-2.0:rc5,5.x-2.0:rc6,5.x-2.0:rc7,5.x-2.1,5.x-2.2