Skip to content
OpenAdvisories
Medium · 4.8 CVE-2024-13298 DRUPAL-CONTRIB-2024-064EUVD-2024-51511GHSA-vw53-vc7r-68m2

Tarte au Citron - Moderately critical - Cross Site Scripting - SA-CONTRIB-2024-064

Published Jan 9, 2025 · Updated Jan 10, 2025 · Assigned by drupal

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Tarte au Citron allows Cross-Site Scripting (XSS).This issue affects Tarte au Citron: from 2.0.0 before 2.0.5.

Affected products

VendorProductAffectedFixed
Drupal Tarte au Citron 2.0.0 – < 2.0.5 2.0.5

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist drupal/tarte_au_citron >= 2.0.0, < 2.0.5 2.0.5 DRUPAL-CONTRIB-2024-064

References