CVEvulnerability
CVE-2014-8378
3.5 LOW
Official page ↗
- Status
- Modified
- Published
- 2014-10-21
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 3.5 LOW — AV:N/AC:M/Au:S/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in the TableField module 7.x-2.x before 7.x-2.3 allows remote authenticated users with the "administer content types" or "administer taxonomy" permission to inject arbitrary web script or HTML via vectors related to the field help text in an entity edit form.
Affected configurations
• tablefield project tablefield 7.x-2.0
• tablefield project tablefield 7.x-2.1
• tablefield project tablefield 7.x-2.2
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://secunia.com/advisories/60688 secunia.com
- http://www.securityfocus.com/bid/69227 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/95312 exchange.xforce.ibmcloud.com
- https://www.drupal.org/node/2320027 Patch
- https://www.drupal.org/node/2320613 Vendor Advisory
- http://secunia.com/advisories/60688 secunia.com
- http://www.securityfocus.com/bid/69227 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/95312 exchange.xforce.ibmcloud.com
- https://www.drupal.org/node/2320027 Patch
- https://www.drupal.org/node/2320613 Vendor Advisory