CVE-2024-13238

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal Typogrify allows Cross-Site Scripting XSS.This issue affects Typogrify: from 0.0.0 before 1.3.0...

CVE-2024-13238 Typogrify - Moderately critical - Cross Site Scripting - SA-CONTRIB-2024-002

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal Typogrify allows Cross-Site Scripting XSS.This issue affects Typogrify: from 0.0.0 before 1.3.0...

CVE-2024-13238

The Drupal Typogrify module contains a persistent XSS when the Twig filter is used in a template, allowing bypass of Twig auto-escape. Root cause: improper input handling in web page generation. Affected: Typogrify up to version 1.3.0 (pre-1.3.0). Mitigation: upgrade to 1.3.0 or apply the provide...