Skip to content
OpenAdvisories
Unscored DRUPAL-CONTRIB-2023-006

This module enables you to add social sharing buttons to a site. The module doesn't sufficiently sanitize the weight and ratio values enter…

Published Mar 1, 2023 · Updated Sep 10, 2026 · Assigned by DRUPAL

Description

This module enables you to add social sharing buttons to a site.

The module doesn't sufficiently sanitize the weight and ratio values entered in the module or block configuration.

This vulnerability is mitigated by the fact that an attacker must have a role with the permission "administer blocks".

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist drupal/better_social_sharing_buttons < 4.0.3 4.0.3 DRUPAL-CONTRIB-2023-006

References