CVE-2011-2714: Drupal Cross-Site Scripting vulnerability
A Cross-Site Scripting vulnerability exists in Drupal 6.20 with Data 6.x-1.0-alpha14 due to insufficient sanitization of table descriptions, field names, or labels before display.
Other sources
Drupal Cross-Site Scripting vulnerability
— Packagist
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2011-2714?
The severity of CVE-2011-2714 is medium.
How does the Cross-Site Scripting vulnerability in CVE-2011-2714 occur?
The Cross-Site Scripting vulnerability in CVE-2011-2714 occurs due to insufficient sanitization of table descriptions, field names, or labels before display.
Which software versions are affected by CVE-2011-2714?
Drupal 6.20 and Drupal Data 6.x-1.0-alpha14 are affected by CVE-2011-2714.
How can I fix the Cross-Site Scripting vulnerability in CVE-2011-2714?
To fix the Cross-Site Scripting vulnerability in CVE-2011-2714, update Drupal to a version that includes the necessary patch.
Where can I find more information about CVE-2011-2714?
You can find more information about CVE-2011-2714 on the following references: [link1](https://www.openwall.com/lists/oss-security/2011/07/26/8), [link2](https://www.drupal.org/node/1056470), and [link3](https://seclists.org/fulldisclosure/2011/Feb/219).