← CVE Intelligence

CVE-2024-13273

Open Social - Moderately critical - Cross Site Scripting, Denial of Service - SA-CONTRIB-2024-037 PUBLISHED

Description (CNA)

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Open Social allows Cross-Site Scripting (XSS).This issue affects Open Social: from 0.0.0 before 12.3.8, from 12.4.0 before 12.4.5, from 13.0.0 before 13.0.0-alpha11.

Affected (CNA)

Vendor / productVersions
Drupal / Open Socialaffected 0.0.0 before 12.3.8; affected 12.4.0 before 12.4.5

CWE

CWE-79

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.