CVE:CVE-2009-4063
CNNVD:CNNVD-200911-254
Drupal Organic Groups (OG)模块 5.x-4.0版本之前的5.x版本和5.x-3.4版本之前的5.x版本的Subgroups中存在跨站脚本攻击漏洞。远程攻击者可以借助未明字节标题，注入任意web脚本或HTML。
solution:Upgrade ezra_barnett_gildesgame og_subgroups to a higher version than 5.x-1.x:dev,5.x-2.0,5.x-3.0,5.x-3.0:dev,5.x-3.1,5.x-3.2,5.x-3.3,5.x-3.x:dev,5.x-4.x:dev,and avoid the version 5.x-1.x:dev,5.x-2.0,5.x-3.0,5.x-3.0:dev,5.x-3.1,5.x-3.2,5.x-3.3,5.x-3.x:dev,5.x-4.x:dev