- cross site scripting - access permissions bypass issues - code execution in upload, though not with standard htaccess configuration http://drupal.org/SA-CORE-2012-004 http://drupal.org/SA-CORE-2013-001
- cross site scripting - access permissions bypass issues - code execution in upload, though not with standard htaccess configuration http://drupal.org/SA-CORE-2012-004 http://drupal.org/SA-CORE-2013-001