Cross-Site Scripting (XSS)

roots/soil is vulnerable to cross-site scripting. The vulnerability exists in the languageAttributes function of CleanUpModule.php due to incorrectly neutralizing the language argument which allows an attacker to inject and execute malicious JavaScript...

CVE-2022-4524 Roots soil Plugin CleanUpModule.php language_attributes cross site scripting

A vulnerability, which was classified as problematic, was found in Roots soil Plugin up to 4.0.x. Affected is the function languageattributes of the file src/Modules/CleanUpModule.php. The manipulation of the argument language leads to cross site scripting. It is possible to launch the attack...