Skip to content
OpenAdvisories
Medium DLA-2637-1 1 CVE

drupal7 - security update

Published Apr 23, 2021 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 9 drupal7 7.52-2+deb9u15

Vulnerabilities 1

  • Medium 6.1
    CVE-2020-13672

    Drupal core Cross-site Scripting (XSS) vulnerability

    Cross-site Scripting (XSS) vulnerability in Drupal core's sanitization API fails to properly filter cross-site scripting under certain circumstances. This issue affects: Drupal Core 9.1.x versions prior to 9.1.7; 9.0.x versions prior to 9.0.12; 8.9.x versions…

    Drupal Core drupal/core drupal/drupal Ubuntu Alpine Packagist