VULNERABILITY INTELLIGENCE
CVE-2014-8378
CVSS score3.5 LOW
EPSS probability0.95%
CISA KEVNot currently listed
Published2014-10-21
Last modified2026-06-17
CVSS vectorAV:N/AC:M/Au:S/C:N/I:P/A:N
Description
Cross-site scripting (XSS) vulnerability in the TableField module 7.x-2.x before 7.x-2.3 allows remote authenticated users with the "administer content types" or "administer taxonomy" permission to inject arbitrary web script or HTML via vectors related to the field help text in an entity edit form.
Weakness classification
- CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')