CVE-2020-13688
Description
Cross-site scripting vulnerability in l Drupal Core allows an attacker could leverage the way that HTML is rendered for affected forms in order to exploit the vulnerability. This issue affects: Drupal Core 8.8.X versions prior to 8.8.10; 8.9.X versions prior to 8.9.6; 9.0.X versions prior to 9.0.6.
CWE
- (none)
Affected
- Drupal / Drupal Core — v=8.8.X <8.8.10 [affected]; v=8.9.X <8.9.6 [affected]; v=9.0.X <9.0.6 [affected]
CVSS
- (none)
References
- https://www.drupal.org/sa-core-2020-009 x_refsource_CONFIRM
Source
cvelistV5-main/cves/2020/13xxx/CVE-2020-13688.json