A Cross-Site Scripting (XSS) vulnerability exists in the Drupal JSON Field module versions before 1.5. This flaw allows improper neutralization of input during web page generation, potentially enabling attackers to execute malicious scripts in the context of the affected application. The vulnerability has a CVSS score of 6.1, indicating a medium severity level. A fix is available in version 1.5 of the JSON Field module.