Description
This module enables you to render a field in an expandable/collapsible region.
The module doesn't sufficiently sanitize the field content when displaying it to an end user.
This vulnerability is mitigated by the fact that an attacker must have a role capable of creating content that uses the field formatter.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | drupal/expandable_formatter | < 1.4.0 | 1.4.0 | DRUPAL-CONTRIB-2023-028 |