description: A Cross-Site Scripting vulnerability exists in Drupal 6.20 with Data 6.x-1.0-alpha14 due to insufficient sanitization of table descriptions, field names, or labels before display.
problem types: XSS
affected:
{
product: Data-module
vendor: Drupal
versions:
status: affected, version: 6.x-1.0-alpha14
}