CVE-2014-5169

State: Published
Severity: Not scored
Published: Oct 20, 2014
Updated: Aug 6, 2024
Reserved: Jul 31, 2014

Description

Cross-site scripting (XSS) vulnerability in the Date module before 7.x-2.8 for Drupal allows remote authenticated users with the permission to create a date field to inject arbitrary web script or HTML via the date field title.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
n/an/a	n/aAffected

References

[oss-security] 20140730 CVE request for Drupal contributed modulesmailing-list
68974vdb-entry
https://www.drupal.org/node/2312609
https://www.drupal.org/node/2311887
[oss-security] 20140731 Re: CVE request for Drupal contributed modulesmailing-list

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.