Security Advisory
CVE-2015-3353
3.5
Vulnerability Description
Cross-site scripting (XSS) vulnerability in the Field Display Label module before 7.x-1.3 for Drupal allows remote authenticated users to inject arbitrary web script or HTML via the alternate field label in content types settings.
Published Date
April 21, 2015
Official Source
NIST NVD Advisory