CVE-2010-1998: XSS
Cross-site scripting (XSS) vulnerability in the CCK TableField module 6.x before 6.x-1.2 for Drupal allows remote authenticated users, with certain node creation or editing privileges, to inject arbitrary web script or HTML via table headers.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2010-1998?
CVE-2010-1998 is classified as a medium severity vulnerability due to its potential for cross-site scripting attacks.
How do I fix CVE-2010-1998?
To fix CVE-2010-1998, upgrade the CCK TableField module to version 6.x-1.2 or later.
Who is affected by CVE-2010-1998?
Authenticated users with node creation or editing privileges on affected versions of the CCK TableField module are vulnerable to CVE-2010-1998.
What kind of attacks can CVE-2010-1998 facilitate?
CVE-2010-1998 can facilitate cross-site scripting attacks that allow attackers to inject malicious scripts into web pages.
Is CVE-2010-1998 a common vulnerability in Drupal?
CVE-2010-1998 is specific to the CCK TableField module and highlights a common XSS vulnerability pattern seen in some Drupal modules.