CVE-2010-1998: Cross-site scripting (XSS) vulnerability in the CCK TableField module 6.x before 6.x-1.2 for Drupal allows...

Security readout for executives and security teams

CVE-2010-1998 is an XSS issue in Drupal's CCK TableField module 6.x before 6.x-1.2. A permitted user could place script or HTML in table headers when creating or editing content. Business risk depends on whether the module is installed and whether untrusted users have those content permissions. Likely exposure is limited to Drupal sites running the CCK TableField module 6.x before 6.x-1.2, especially where non-admin users can create or edit nodes containing table fields. Treat as a targeted cleanup item unless exposed authoring workflows involve untrusted users. Prioritize quickly for community, customer, or contractor-editable Drupal sites. Mitigation focus: Upgrade CCK TableField 6.x to 6.x-1.2 or later.; Review Drupal permissions for users who can create or edit affected nodes.; Restrict table field editing to trusted roles where possible..

Prepared

Jun 28, 2026, 02:49 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.