Advisory ID: DRUPAL-SA-CORE-2009-005 Project: Drupal core Version: 5.x, 6.x Date: 2009-April-29 Security risk: Moderately critical Exploitable from: Remote Vulnerability: Cross site scripting Post navigation New pages and RSS feeds for security announcements SA-CORE-2009-006 – Drupal core – Cross site scripting