Reflected cross-site scripting (XSS) In drupal/drupal
Description
Cross-site Scripting in Drupal Core Access Bypass vulnerability in Drupal Core allows for an attacker to leverage the way that HTML is rendered for affected forms in order to exploit the vulnerability. This issue affects: Drupal Core 8.8.x versions prior to 8.8.10; 8.9.x versions prior to 8.9.6; 9.0.x versions prior to 9.0.6.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Package | Affected version | Patched versions |
|---|---|---|---|
 packagist | 8.8.10, 8.9.6, 9.0.6 | ||
packagist | 8.8.10, 8.9.6, 9.0.6 |
Aliases
1. 2. 3. 4.
References
1. 2. 3. 4. 5. 6.