CVE-2011-1066: Reyero Messaging

Low severity, CVSS 2.6. EPSS: 1.1% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in the Messaging module 6.x-2.x before 6.x-2.4 and 6.x-4.x before 6.x-4.0-beta8 for Drupal allows remote attackers with administer messaging permissions to inject arbitrary web script or HTML via unspecified vectors.

Affected products

• Reyero Messaging: version 6.x-2.0 only; version 6.x-2.1 only; version 6.x-2.2 only; version 6.x-2.3 only; version 6.x-4.x only

Published 2011-02-23. Last modified 2026-06-16.