CVE-2014-9346

no score yetEPSS 0.9%

Multiple cross-site scripting (XSS) vulnerabilities in the Hierarchical Select module 6.x-3.x before 6.x-3.9 for Drupal allow remote authenticated users with certain permissions to inject arbitrary web script or HTML via vectors related to the (1) taxonomy term title for instances with Save term lineage enabled or (2) entity type fields.

EPSS: 0.9% chance of exploitation in the next 30 days; higher than 61% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2014-12-08
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

hierarchical_select_project:hierarchical_select

References

http://secunia.com/advisories/60511
https://exchange.xforce.ibmcloud.com/vulnerabilities/99136
https://www.drupal.org/node/2385933
https://www.drupal.org/node/2386615
http://secunia.com/advisories/60511

Check your stack JSON