Опубликовано: 01 апр. 2025
Источник: github
Github: Прошло ревью
CVSS4: 1.3
CVSS3: 6.1
Описание
Drupal Formatter Suite Vulnerable to Cross-Site Scripting (XSS) via Link Element Attributes
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Formatter Suite allows Cross-Site Scripting (XSS).This issue affects Formatter Suite: from 0.0.0 before 2.1.0.
Пакеты
Наименование
drupal/formatter_suite
composer
Затронутые версииВерсия исправления
< 2.1.0
2.1.0
Связанные уязвимости
CVSS3: 6.1
nvd
10 месяцев назад
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Formatter Suite allows Cross-Site Scripting (XSS).This issue affects Formatter Suite: from 0.0.0 before 2.1.0.