CVE-2014-5021 | BDVDB-2026-62850 Detail

Description#

Cross-site scripting (XSS) vulnerability in the Form API in Drupal 6.x before 6.32 and possibly 7.x before 7.29 allows remote authenticated users with the "administer taxonomy" permission to inject arbitrary web script or HTML via an option group label.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.debian.org/security/2014/dsa-2983
https://www.drupal.org/SA-CORE-2014-003

Exploit#

No public exploit known

History#

Version 12014-07-22Record published in the CVE List.
Version 22024-09-17Most recent update recorded in the CVE List.