Drupal jQuery Countdown third party module version 7.x suffers from a cross site scripting vulnerability…. Drupal jQuery Countdown third party module version 7.x suffers from a cross site scripting vulnerability.
Read more http://packetstormsecurity.com/files/123213/DRUPAL-SA-CONTRIB-2013-076.txt