A Cross-Site Scripting vulnerability exists in Drupal 6.20 with Data 6.x-1.0-alpha14 due to insufficient sanitization of table descriptions, field names, or labels before display.

Affected Packages

Packagist drupal/core

Related CVEs

CVE-2011-2714

Key Information

GHSA ID

GHSA-qp8q-gwf5-hqh2

Published

April 22, 2022 12:24 AM

Last Modified

April 23, 2024 10:35 PM

CVSS Score

5.0 /10

Primary Ecosystem

Packagist

Primary Package

drupal/core

GitHub Reviewed

✓ Yes

Dataset

Last updated: June 18, 2025 6:25 AM

Data from GitHub Advisory Database. This information is provided for research and educational purposes.