Описание
Drupal Core Cross-Site Scripting (XSS)
Drupal uses JavaScript to render status messages in some cases and configurations. In certain situations, the status messages are not adequately sanitized. This issue affects Drupal Core: from 8.8.0 before 10.2.11, from 10.3.0 before 10.3.9, from 11.0.0 before 11.0.8.
Пакеты
drupal/core
>= 8.8.0, < 10.2.11
10.2.11
drupal/core
>= 10.3.0, < 10.3.9
10.3.9
drupal/core
>= 11.0.0, < 11.0.8
11.0.8
drupal/core-recommended
>= 8.8.0, < 10.2.11
10.2.11
drupal/core-recommended
>= 10.3.0, < 10.3.9
10.3.9
drupal/core-recommended
>= 11.0.0, < 11.0.8
11.0.8
drupal/drupal
>= 8.8.0, < 10.2.11
10.2.11
drupal/drupal
>= 10.3.0, < 10.3.9
10.3.9
drupal/drupal
>= 11.0.0, < 11.0.8
11.0.8
Связанные уязвимости
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Drupal Core allows Cross-Site Scripting (XSS).This issue affects Drupal Core: from 8.8.0 before 10.2.11, from 10.3.0 before 10.3.9, from 11.0.0 before 11.0.8.
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Drupal Core allows Cross-Site Scripting (XSS).This issue affects Drupal Core: from 8.8.0 before 10.2.11, from 10.3.0 before 10.3.9, from 11.0.0 before 11.0.8.
Improper Neutralization of Input During Web Page Generation (XSS or 'C ...
Уязвимость CMS-системы Drupal, связанная с недостаточной защитой структуры веб-страницы, позволяющая нарушителю провести атаку межсайтового скриптинга (XSS)