Cross-site scripting (XSS) vulnerability in the CCK TableField module 6.x before 6.x-1.2 for Drupal allows remote authenticated users, with certain node creation or editing privileges, to inject arbitrary web script or HTML via table headers.
2010-05-20T17:30:01.897
2025-04-11T00:51:21.963
Deferred
CVSSv2: 2.1 (LOW)
AV:N/AC:H/Au:S/C:N/I:P/A:N
3.9
2.9
Type | Vendor | Product | Version/Range | Vulnerable? |
---|---|---|---|---|
Application | kevinhankens | tablefield | 6.x-1.0 | Yes |
Application | kevinhankens | tablefield | 6.x-1.0 | Yes |
Application | kevinhankens | tablefield | 6.x-1.0 | Yes |
Application | kevinhankens | tablefield | 6.x-1.1 | Yes |
Application | drupal | drupal | * | No |