Cross site scripting

2015-07-0615:59:00

PRIOn knowledge base

www.prio-n.com

5.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

36.4%

JSON

Cross-site scripting (XSS) vulnerability in the Node Field module 7.x-2.x before 7.x-2.45 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via unspecified vectors involving internal fields.

CPENameOperatorVersion
node_fieldeq7.120.241
node_fieldeq7.120.21
node_fieldeq7.120.22
node_fieldeq7.120.242
node_fieldeq7.120.23
node_fieldeq7.120.24
node_fieldeq7.120.20
node_fieldeq7.120.243
node_fieldeq7.120.244

Name	Operator	Version
node_field	eq	7.120.241
node_field	eq	7.120.21
node_field	eq	7.120.22
node_field	eq	7.120.242
node_field	eq	7.120.23
node_field	eq	7.120.24
node_field	eq	7.120.20
node_field	eq	7.120.243
node_field	eq	7.120.244