Miembros de
Boletines de Vulnerabilidades |
Drupal core - Critical - Cross Site Scripting - SA-CORE-2024-005 |
|
| Software afectado | Drupal |
|
Project: Drupal coreDate: 2024-November-20Security risk: Critical 17 ∕ 25 AC:None/A:None/CI:Some/II:Some/E:Theoretical/TD:DefaultVulnerability: Cross Site ScriptingDescription: Drupal 7 cores Overlay module doesnt safely handle user input, leading to reflected cross-site scripting under certain circumstances.Only sites with the Overlay module enabled are affected by this vulnerability.Solution: Install the latest version:If you are using Drupal 7, update to Drupal 7.102Sites may also More info: https://www.drupal.org/sa-core-2024-005 |
|
