TI-2014-04218 CVE-2014-5169 · GHSA-g6ch-jp62-x9c6Cross-site scripting (XSS) vulnerability in the Date module before 7.x-2.8 for Drupal…Priority LOW 20Cross-site scripting (XSS) vulnerability in the Date module before 7.x-2.8 for Drupal allows remote authenticated users with the permission to create a date field to inject arbitrary web script or HTML via the date field…CVSS 2.0LOW 3.5· Network · Low privileges · Interaction — · EPSS 0.01417 · Published 2014-10-20 · No fix listed CWE-79