TI-2011-04465 CVE-2011-5188 · GHSA-hgm2-x96p-g52qCross-site scripting (XSS) vulnerability in the Support Timer module 6.x-1.x before…Priority LOW 13Cross-site scripting (XSS) vulnerability in the Support Timer module 6.x-1.x before 6.x-1.4 for Drupal allows remote authenticated users with the "track time spent" permission to inject arbitrary web script or HTML via u…CVSS 2.0LOW 2.1· Network · Low privileges · Interaction — · EPSS 0.00941 · Published 2012-09-20 · No fix listed CWE-79