CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

NVD•added 2025/01/09 8:15 p.m.•12 views

CVE-2024-13273

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal Open Social allows Cross-Site Scripting XSS.This issue affects Open Social: from 0.0.0 before 12.3.8, from 12.4.0 before 12.4.5, from 13.0.0 before 13.0.0-alpha11...

5.4CVSS0.00213EPSS

Exploits0References1

Vulnrichment•added 2025/01/09 7:26 p.m.•11 views

CVE-2024-13273 Open Social - Moderately critical - Cross Site Scripting, Denial of Service - SA-CONTRIB-2024-037

6.6AI score0.00213EPSS

Exploits0References1

CVE•added 2025/01/09 7:26 p.m.•58 views

CVE-2024-13273

Open Social (a Drupal distribution) is affected by CVE-2024-13273 due to improper input neutralization during web page generation, enabling Cross-Site Scripting (XSS). Affected versions are 0.0.0–12.3.8, 12.4.0–12.4.5, and 13.0.0–13.0.0-alpha11. The issue stems from insufficient validation in Ope...

5.4CVSS6.2AI score0.00213EPSS

Exploits0References1Affected Software1