Description
Cross-site scripting (XSS) vulnerability in the CCK TableField module 6.x before 6.x-1.2 for Drupal allows remote authenticated users, with certain node creation or editing privileges, to inject arbitrary web script or HTML via table headers.
References
- http://drupal.org/node/790364
- ccktablefield-tableheaders-xss(58353) vdb-entry
- http://drupal.org/node/790998
- 64358 vdb-entry
- 39954 vdb-entry
- ADV-2010-1080 vdb-entry
- 39644 third-party-advisory