Cross-Site Scripting Vulnerability in Drupal Tarte au Citron
CVE-2024-13298

Currently unrated

Key Information:

Vendor

Drupal
Vendor
CVE Published:
9 January 2025

What is CVE-2024-13298?

An issue has been identified in Drupal's Tarte au Citron, where improper neutralization of user input during web page generation can lead to Cross-Site Scripting (XSS). This vulnerability affects the product versions from 2.0.0 to 2.0.4, allowing attackers to inject malicious scripts into webpages viewed by end users, potentially compromising the security of their web applications.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://www.drupal.org/sa-contrib-2024-064

Timeline

  • Vulnerability published

JSON
.