CVE-2011-2714

score

<0.1

cvss

6.1

epss

1.2%

published

2020-01-14

kev added

—

first seen

2026-10-21

Drupal 6.20 with Data 6.x-1.0-alpha14 contains a reflected XSS caused by insufficient sanitization of table descriptions, field names, or labels before display, letting attackers execute arbitrary scripts in the victim's browser.