Hierarchical Select

hierarchical_select

Vendor: Hierarchical Select Project • 1 CVE

CVEs (1)

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2014-9346

1Hierarchical Select Project

1Hierarchical Select

May 6, 2026

Dec 8, 2014

N/A· v4

N/A· v3

3.5 LOW· v2

Multiple cross-site scripting (XSS) vulnerabilities in the Hierarchical Select module 6.x-3.x before 6.x-3.9 for Drupal allow remote authenticated users with certain permissions to inject arbitrary web script or HTML via vectors related to the (1) taxonomy term title for instances with Save term lineage enabled or (2) entity type fields.Show less