CVE-2024-55635

State: PUBLISHED · Published: 2024-12-09 · Updated: 2024-12-10 · Assigner: drupal

Description

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Drupal Core allows Cross-Site Scripting (XSS).This issue affects Drupal Core: from 7.0 before 7.102.

CWE

CWE-79 — CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting')

Affected

Drupal / Drupal Core — v=7.0 <7.102 [affected]

CVSS

(none)

References

https://www.drupal.org/sa-core-2024-005

Source

cvelistV5-main/cves/2024/55xxx/CVE-2024-55635.json