Skip to content
OpenAdvisories
Medium · 4.8 CVE-2024-13305 DRUPAL-CONTRIB-2024-071EUVD-2024-51518GHSA-9j33-5mgw-847x

Entity Form Steps - Moderately critical - Cross site scripting - SA-CONTRIB-2024-071

Published Jan 9, 2025 · Updated Jan 10, 2025 · Assigned by drupal

Vendor: Drupal Product: Entity Form Steps Package: drupal/entity_form_steps Ecosystem: Packagist

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Entity Form Steps allows Cross-Site Scripting (XSS).This issue affects Entity Form Steps: from 0.0.0 before 1.1.4.

Affected products

VendorProductAffectedFixed
Drupal Entity Form Steps 0.0.0 – < 1.1.4 1.1.4

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist drupal/entity_form_steps < 1.1.4 1.1.4 DRUPAL-CONTRIB-2024-071

References