Description
Cross-site scripting (XSS) vulnerability in the Field Display Label module before 7.x-1.3 for Drupal allows remote authenticated users to inject arbitrary web script or HTML via the alternate field label in content types settings.
Unscored
CVE-2015-3353
EUVD-2015-3398GHSA-7qfv-vxcr-86h7
Cross-site scripting (XSS) vulnerability in the Field Display Label module before 7.x-1.3 for Drupal allows remote authenticated users to i…
Published Apr 21, 2015 · Updated Aug 6, 2024 · Assigned by mitre