CVE-2010-1998 in TableField

Riassunto

di MITRE

Cross-site scripting (XSS) vulnerability in the CCK TableField module 6.x before 6.x-1.2 for Drupal allows remote authenticated users, with certain node creation or editing privileges, to inject arbitrary web script or HTML via table headers.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• Prenotare: 20/05/2010
• Divulgazione: 20/05/2010
• Moderazione: accettato
• Voce: VDB-53291
• CPE: pronto
• CWE: CWE-79 (confermato)
• CVSS: 3.5 (VulDB)
• EPSS: 0.01014
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2010-1998
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2010-1998
• CVE Details: https://www.cvedetails.com/cve/CVE-2010-1998/