4 matches found
CVE-2014-5169
Cross-site scripting XSS vulnerability in the Date module before 7.x-2.8 for Drupal allows remote authenticated users with the permission to create a date field to inject arbitrary web script or HTML via the date field title...
CVE-2014-5169
Cross-site scripting XSS vulnerability in the Date module before 7.x-2.8 for Drupal allows remote authenticated users with the permission to create a date field to inject arbitrary web script or HTML via the date field title...
Fedora 20 : drupal7-date-2.8-1.fc20 (2014-9052)
Update to upstream 2.8 release due to security fix for CVE-2014-5169 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...
Fedora 19 : drupal7-date-2.8-1.fc19 (2014-9087)
Update to upstream 2.8 release, due to security fix for CVE-2014-5169 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...