Cross-site scripting (XSS) vulnerability in the Node Field module 7.x-2.x before 7.x-2.45 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via unspecified vectors involving internal fields.
References
Link | Resource |
---|---|
http://www.securityfocus.com/bid/71201 | |
https://www.drupal.org/node/2373157 | Patch |
https://www.drupal.org/node/2378287 | Patch Vendor Advisory |
Configurations
Configuration 1 (hide)
|
Information
Published : 2015-07-06 08:59
Updated : 2015-07-08 08:54
NVD link : CVE-2014-9739
Mitre link : CVE-2014-9739
JSON object : View
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Products Affected
node_field_project
- node_field