Skip to content
OpenAdvisories
Medium · 6.1 CVE-2024-34481 EUVD-2024-34829GHSA-638w-x7fx-cgrj

drupal-wiki.com Drupal Wiki before 8.31.1 allows XSS via comments, captions, and image titles of a Wiki page.

Published Jul 5, 2024 · Updated Nov 4, 2025 · Assigned by mitre

Description

drupal-wiki.com Drupal Wiki before 8.31.1 allows XSS via comments, captions, and image titles of a Wiki page.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Ubuntu Pro 16.04 LTS drupal7 No fix yet —
Ubuntu Pro 14.04 LTS drupal7 No fix yet —

References