Drupal MediaFront versions 6.x and 7.x suffer from a cross site scripting vulnerability…. Drupal MediaFront versions 6.x and 7.x suffer from a cross site scripting vulnerability.

Read more http://packetstormsecurity.com/files/123205/DRUPAL-SA-CONTRIB-2013-074.txt