Drupal Webform Code Injection Vulnerability

Drupal Webform is affected by a code injection vulnerability caused by improper neutralization of special elements used in a template engine.

The following versions are vulnerable:

• from 0.0.0 to 6.2.12
• from 6.3.0 to 6.3.1

This issue allows code injection in the affected versions.