Skip to content
OpenAdvisories
Medium · 5.4 CVE-2024-13294 DRUPAL-CONTRIB-2024-060EUVD-2024-51507GHSA-9838-cxcw-r6rf

POST File - Critical - Cross Site Scripting, Arbitrary PHP code execution - SA-CONTRIB-2024-060

Published Jan 9, 2025 · Updated Jan 10, 2025 · Assigned by drupal

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal POST File allows Cross-Site Scripting (XSS).This issue affects POST File: from 0.0.0 before 1.0.2.

Affected products

VendorProductAffectedFixed
Drupal POST File 0.0.0 – < 1.0.2 1.0.2

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist drupal/postfile < 1.0.2 1.0.2 DRUPAL-CONTRIB-2024-060

References