[XSS in drupal printing module]
you need admin privs in orde to exploit this
http://lampsecurity.org/drupal-print-module-vulnerabilities