Cross-site scripting (XSS) vulnerability in Dex 5.x-1.0 and earlier and 6.x-1.0-rc1 and earlier, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.Referenceshttps://exchange.xforce.ibmcloud.com/vulnerabilities/53569http://drupal.org/node/592394http://www.securityfocus.com/bid/36559