Skip to content
OpenAdvisories
Unscored DRUPAL-CONTRIB-2023-028

This module enables you to render a field in an expandable/collapsible region. The module doesn't sufficiently sanitize the field content w…

Published Jun 28, 2023 · Updated Sep 10, 2026 · Assigned by DRUPAL

Description

This module enables you to render a field in an expandable/collapsible region.

The module doesn't sufficiently sanitize the field content when displaying it to an end user.

This vulnerability is mitigated by the fact that an attacker must have a role capable of creating content that uses the field formatter.

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist drupal/expandable_formatter < 1.4.0 1.4.0 DRUPAL-CONTRIB-2023-028

References