An authenticated remote attacker can exploit a vulnerability in Drupal Orejime to perform a Cross-Site Scripting (XSS) attack.