A bug in the output filter employed by Drupal makes it possible for malicious users to insert script code into pages.
https://drupal.org/node/295053
This vulnerability affects the following application versions:
- Drupal 6.0
- Drupal 6.1
- Drupal 6.2
- Drupal 6.3