Drupal Click2Sell Suite third party module version 6.x suffers from cross site request forgery and cross site scripting vulnerabilities…. Drupal Click2Sell Suite third party module version 6.x suffers from cross site request forgery and cross site scripting vulnerabilities.

Read more http://packetstormsecurity.com/files/123210/DRUPAL-SA-CONTRIB-2013-075.txt