CVE-2014-8378 | BDVDB-2026-65789 Detail

Description#

Cross-site scripting (XSS) vulnerability in the TableField module 7.x-2.x before 7.x-2.3 allows remote authenticated users with the "administer content types" or "administer taxonomy" permission to inject arbitrary web script or HTML via vectors related to the field help text in an entity edit form.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/bid/69227
http://secunia.com/advisories/60688
https://exchange.xforce.ibmcloud.com/vulnerabilities/95312
https://www.drupal.org/node/2320027
https://www.drupal.org/node/2320613

Exploit#

No public exploit known

History#

Version 12014-10-21Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.