Security Advisory

CVE-2014-9739

3.5

Vulnerability Description

Cross-site scripting (XSS) vulnerability in the Node Field module 7.x-2.x before 7.x-2.45 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via unspecified vectors involving internal fields.
Published Date July 6, 2015
Official Source NIST NVD Advisory