3 matches found
CVE-2024-13287
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal Views SVG Animation allows Cross-Site Scripting XSS.This issue affects Views SVG Animation: from 0.0.0 before 1.0.1...
CVE-2024-13287 Views SVG Animation - Moderately critical - Cross Site Scripting - SA-CONTRIB-2024-051
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal Views SVG Animation allows Cross-Site Scripting XSS.This issue affects Views SVG Animation: from 0.0.0 before 1.0.1...
CVE-2024-13287
The Drupal Views SVG Animation module (versions 0.0.0 through 1.0.0 ) is vulnerable to Cross-Site Scripting (XSS) due to improper input neutralization during web page generation. Specifically, the module fails to sufficiently sanitize SVG files before embedding them into the HTML. A remote attack...