Skip to content
OpenAdvisories
Unscored DRUPAL-CONTRIB-2023-024

This module enables you to create dynamic layouts and add sample color palettes for color selection hints via its UI. The module doesn't su…

Published Jun 28, 2023 · Updated Sep 10, 2026 · Assigned by DRUPAL

Description

This module enables you to create dynamic layouts and add sample color palettes for color selection hints via its UI.

The module doesn't sufficiently sanitize the module's settings in certain scenarios leading to a Cross Site Scripting vulnerability.

This vulnerability is mitigated by the fact that an attacker must have a role with the permissions "administer gridstack".

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist drupal/gridstack < 2.11.0 2.11.0 DRUPAL-CONTRIB-2023-024

References