Approved changes feed: RSS · Atom

cpe:2.3:a:tablefield_project:tablefield:7.x-2.2:*:*:*:*:drupal:*:*

part: a version: 7.x-2.2 update: *

VendorTablefield Project (25c12c7c-7f89-5ecc-88c5-dc3f17a8c802)
ProductTablefield (68d35b34-dc8a-5fd9-8509-175a086b234e)
Edition*
Language*
Software edition*
Target softwaredrupal
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/drupalprojects/tablefield purl2cpe 2026-06-01 10:15:43.242932

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-8378 vulnerable 2026-06-08 05:06:08.663073 Details available
Cross-site scripting (XSS) vulnerability in the TableField module 7.x-2.x before 7.x-2.3 allows remote authenticated users with the "administer content types" or "administer taxonomy" permission to inject arbitrary web script or HTML via vectors related to the field help text in an entity edit form.
Published: 2014-10-21T15:00:00.000Z
Updated: 2024-08-06T13:18:47.842Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.