CVE-2011-5187 in Support
Riassunto
di MITRE
Cross-site scripting (XSS) vulnerability in the Support Ticketing System module 6.x-1.x before 6.x-1.7 for Drupal allows remote authenticated users with the "administer support projects" permission to inject arbitrary web script or HTML via unspecified vectors.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.