CyberRota Analysis
AI-GeneratedDrupal core is vulnerable to a Cross-Site Scripting (XSS) attack due to improper input neutralization during web page generation, affecting multiple versions up to 11.3.12. This vulnerability could allow an attacker to inject malicious scripts into web pages viewed by users, potentially leading to data theft or session hijacking. Organizations using affected versions of Drupal should prioritize patching this vulnerability to mitigate the risk of exploitation.
Original NVD Description
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Drupal core allows Cross-Site Scripting (XSS). This issue affects Drupal core versions: from 0.0.0 to 10.5.12, from 10.6.0 to 10.6.11, from 11.2.0 to 11.2.14, from 11.3.0 to 11.3.12, from 0.0.0 to 11.0.*, from 0.0.0 to 11.1.*.
Related CVEs
Other vulnerabilities affecting the same vendor(s)