TI-2009-04848 CVE-2009-5096 · GHSA-mrh4-qfxq-r33wCross-site scripting (XSS) vulnerability in the Flag Content module 5.x-2.x before…Priority LOW 23Cross-site scripting (XSS) vulnerability in the Flag Content module 5.x-2.x before 5.x-2.10 for Drupal allows remote attackers to inject arbitrary web script or HTML via the Reason parameter.CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.01309 · Published 2011-09-13 · No fix listed CWE-79