CVE-2014-7869: XSS
Cross-site scripting (XSS) vulnerability in the configuration UI in the Context Form Alteration module 7.x-1.x before 7.x-1.2 for Drupal allows remote authenticated users with the "administer contexts" permission to inject arbitrary web script or HTML via unspecified vectors.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2014-7869?
CVE-2014-7869 is considered a moderate severity vulnerability due to its potential for allowing cross-site scripting attacks.
How do I fix CVE-2014-7869?
To fix CVE-2014-7869, you should upgrade to the Context Form Alteration module version 7.x-1.2 or later.
Who is affected by CVE-2014-7869?
CVE-2014-7869 affects users of the Context Form Alteration module 7.x-1.0 and 7.x-1.1 for Drupal who have the 'administer contexts' permission.
What type of vulnerability is CVE-2014-7869?
CVE-2014-7869 is classified as a cross-site scripting (XSS) vulnerability.
Can CVE-2014-7869 be exploited remotely?
Yes, CVE-2014-7869 can be exploited by remote authenticated users with the appropriate permissions.