CVE-2011-2714
CVE-2011-2714
This page contains facts from public vulnerability sources. Check the original advisory before updating.
A Cross-Site Scripting vulnerability exists in Drupal 6.20 with Data 6.x-1.0-alpha14 due to insufficient sanitization of table descriptions, field names, or labels before display.
CVSS 6.1 · Medium · EPSS 1.2%
- Published
- Updated
Stack: php
Affected products and versions
data-module
- Versions
- 6.x-1.0-alpha14: Affected
No fix published
drupal/core Packagist
- Versions
- 6.20
No fix published