A stored cross-site scripting (XSS) vulnerability exists in the Drupal Data field component, affecting versions from 0.0.0 up to 2.0.14. This vulnerability is due to improper neutralization of input during web page generation, allowing malicious scripts to be stored and executed in users' browsers.