Cross site scripting

Cross-site scripting XSS vulnerability in the Date module before 7.x-2.8 for Drupal allows remote authenticated users with the permission to create a date field to inject arbitrary web script or HTML via the date field title...

CVE-2014-5169

Cross-site scripting XSS vulnerability in the Date module before 7.x-2.8 for Drupal allows remote authenticated users with the permission to create a date field to inject arbitrary web script or HTML via the date field title...

CVE-2014-5169

Cross-site scripting XSS vulnerability in the Date module before 7.x-2.8 for Drupal allows remote authenticated users with the permission to create a date field to inject arbitrary web script or HTML via the date field title...

PT-2014-6309

Name of the Vulnerable Software and Affected Versions Drupal Date module versions prior to 7.x-2.8 Description A cross-site scripting XSS issue exists, allowing remote authenticated users with the permission to create a date field to inject arbitrary web script or HTML via the date field title...

CVE-2014-5169: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Date module before 7.x-2.8 for Drupal allows remote authenticated users with the permission to create a date field to inject arbitrary web script or HTML via the date field title...