Описание
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Link field display mode formatter allows Cross-Site Scripting (XSS).This issue affects Link field display mode formatter: from 0.0.0 before 1.6.0.
Ссылки
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 1.6.0 (исключая)
cpe:2.3:a:upstreamable:link_field_display_mode_formatter:*:*:*:*:*:drupal:*:*
EPSS
Процентиль: 5%
0.00024
Низкий
6.1 Medium
CVSS3
Дефекты
CWE-79
Связанные уязвимости
redhat
6 месяцев назад
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Link field display mode formatter allows Cross-Site Scripting (XSS).This issue affects Link field display mode formatter: from 0.0.0 before 1.6.0.
CVSS3: 6.1
github
6 месяцев назад
Drupal Link field display mode formatter Cross-Site Scripting (XSS) vulnerability
EPSS
Процентиль: 5%
0.00024
Низкий
6.1 Medium
CVSS3
Дефекты
CWE-79