This module enables you to display one simple location map via Google Maps.
The module doesnโt sufficiently sanitize user input in the configuration text fields of the module (allows any tags and does not respect text format configuration).
This vulnerability is mitigated by the fact that an attacker must have a role with the permission โadminister locationmapโ.
Drupal core is not affected. If you do not use the contributed Location Map module, there is nothing you need to do.
Install locationmap-7.x-2.4
Also see the Location Map project page.
cve.mitre.org/
twitter.com/drupalsecurity
www.drupal.org/contact
www.drupal.org/project/locationmap
www.drupal.org/project/locationmap/releases/7.x-2.4
www.drupal.org/security-team
www.drupal.org/security-team/risk-levels
www.drupal.org/security/secure-configuration
www.drupal.org/u/mlhess
www.drupal.org/user/1942204
www.drupal.org/writing-secure-code