Drupal Activity vulnerabilities

• activity A cross-site request forgery (CSRF) vulnerability in the Activity module 6.x-1.x for Drupal. CVE-2012-2079 8.8 HighNovember 21, 2019
• activity Cross-site scripting (XSS) vulnerability in the Activity module 6.x-1.x for Drupal. CVE-2012-2078 4.8 MediumNovember 21, 2019