CVE-2011-2714: Drupal Data

Medium severity, CVSS 6.1. EPSS: 1.2% chance of exploitation in the next 30 days.

A Cross-Site Scripting vulnerability exists in Drupal 6.20 with Data 6.x-1.0-alpha14 due to insufficient sanitization of table descriptions, field names, or labels before display.

Affected products

• Drupal Data: version 6.x-1.0 only
• Drupal Drupal: version 6.20 only

Published 2020-01-14. Last modified 2026-06-16.