CVE:CVE-2009-4602
CNNVD:CNNVD-201001-071
Drupal Randomizer模块5.x到5.x-1.0和6.x到6.x-1.0中存在跨站脚本攻击漏洞。远程攻击者可以借助未明向量，注入任意的web脚本或HTML。
solution:Upgrade drupal randomizer to a higher version than 5.x-1.0,6.x-1.0,and avoid the version 5.x-1.0,6.x-1.0