A privilege misconfiguration vulnerability in the Drupal Webform module allows stored cross-site scripting (XSS) attacks. This affects Webform versions from 0.0.0 up to 6.2.12 and from 6.3.0 to 6.3.1. The vulnerability requires high privileges and user interaction, and it has a low severity score.