Project:
Vulnerability:
Cross-site scripting
CVE IDs:
CVE-2020-13668
Description:
Drupal 8 and 9 have a reflected cross-site scripting (XSS) vulnerability under certain circumstances.
An attacker could leverage the way that HTML is rendered for affected forms in order to exploit the vulnerability.
Solution:
Install the latest version:
- If you are using Drupal 8.8.x, upgrade to .
- If you are using Drupal 9.0.x, upgrade to
Fixed By:
- of the Drupal Security Team
- , provisional member of the Drupal Security Team
- , provisional member of the Drupal Security Team
Vollständiger Original-Bericht
Ausführliche Details, Code-Beispiele & Hersteller-Stellungnahme auf drupal.org.
SOCIAL SHARE CARD GENERATOR