Secunia Security Advisory – A vulnerability has been reported in the iTweak Upload module for Drupal, which can be exploited by malicious users to conduct script insertion attacks.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/86659/sa38633.txt
Source: https://packetstormsecurity.com/files/86659/Secunia-Security-Advisory-38633.html