Summary

A weakness in the email module of the Drupal content management system allows an attacker to inject malicious code into email messages. This could let them steal user data or take control of accounts. Update the email module to the latest version to fix this issue.