Security Advisory

CVE-2020-13688

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2021-06-11 15:08:56
Last updated 2024-08-04 12:25:16
Assigner drupal
CVSS score not scored
State PUBLISHED

Description

Cross-site scripting vulnerability in l Drupal Core allows an attacker could leverage the way that HTML is rendered for affected forms in order to exploit the vulnerability. This issue affects: Drupal Core 8.8.X versions prior to 8.8.10; 8.9.X versions prior to 8.9.6; 9.0.X versions prior to 9.0.6.