CVE:CVE-2008-2773
CNNVD:CNNVD-200806-273
Cross-site scripting (XSS) vulnerability in the 5.x-1.3前的Taxonomy Image 模块 5.x 和6.x-1.3前的Drupal模块6.x中存在跨站脚本攻击漏洞，远程攻击者通过未明向量来注入任意web脚本或HTML。
solution:Upgrade drupal taxonomy_image_module to a higher version than 5,6,and avoid the version 5,6