CVE-2024-13273

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal Open Social allows Cross-Site Scripting XSS.This issue affects Open Social: from 0.0.0 before 12.3.8, from 12.4.0 before 12.4.5, from 13.0.0 before 13.0.0-alpha11...

CVE-2024-13273 Open Social - Moderately critical - Cross Site Scripting, Denial of Service - SA-CONTRIB-2024-037

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal Open Social allows Cross-Site Scripting XSS.This issue affects Open Social: from 0.0.0 before 12.3.8, from 12.4.0 before 12.4.5, from 13.0.0 before 13.0.0-alpha11...

CVE-2024-13273 Open Social - Moderately critical - Cross Site Scripting, Denial of Service - SA-CONTRIB-2024-037

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal Open Social allows Cross-Site Scripting XSS.This issue affects Open Social: from 0.0.0 before 12.3.8, from 12.4.0 before 12.4.5, from 13.0.0 before 13.0.0-alpha11...

CVE-2024-13273

The Drupal Open Social CMS is vulnerable to Cross-Site Scripting (XSS) due to improper neutralization of input during web page generation. Specifically, the Social Embed submodule fails to sufficiently validate added URLs, which could lead to Stored XSS or Blind SSRF if the module is enabled. Thi...