Drupal Core Vulnerability - XSS (Cross-Site Scripting)

CVE-2024-12393

Summary

A vulnerability in Drupal Core allows for Cross-Site Scripting (XSS) due to improper neutralization of input during web page generation. Attackers can exploit this flaw to inject arbitrary web scripts into pages displayed to users, potentially leading to data theft or unauthorized actions. The issue impacts various versions of Drupal Core, necessitating immediate action from website administrators to ensure the security of their web applications.

References