Unrated severityNVD Advisory· Published Jun 2, 2014· Updated May 6, 2026
CVE-2014-3933
CVE-2014-3933
Description
Cross-site scripting (XSS) vulnerability in the address components field formatter in the AddressField Tokens module 7.x-1.x before 7.x-1.4 for Drupal allows remote authenticated users to inject arbitrary web script or HTML via an address field.
Affected products
4cpe:2.3:a:newsignature:addressfield_tokens:7.x-1.0:*:*:*:*:drupal:*:*+ 3 more
- cpe:2.3:a:newsignature:addressfield_tokens:7.x-1.0:*:*:*:*:drupal:*:*
- cpe:2.3:a:newsignature:addressfield_tokens:7.x-1.1:*:*:*:*:drupal:*:*
- cpe:2.3:a:newsignature:addressfield_tokens:7.x-1.2:*:*:*:*:drupal:*:*
- cpe:2.3:a:newsignature:addressfield_tokens:7.x-1.3:*:*:*:*:drupal:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
4- drupal.org/node/2267475nvdPatch
- drupal.org/node/2267485nvdPatchVendor Advisory
- secunia.com/advisories/58399nvd
- www.securityfocus.com/bid/67545nvd
News mentions
0No linked articles in our index yet.