CVE-2024-13298

creationtimestamp| type| source ---|---|--- 2025-01-09 21:16:11+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfdlyg7iwg2k 2025-01-09 21:38:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lfdnayhsqq2q 2025-01-09 22:48:17+00:00| seen|...

CVE-2024-13298

The Drupal Tarte au Citron module (versions 2.0.0 to 2.0.4 ) is vulnerable to Cross-Site Scripting (XSS) due to improper input neutralization during web page generation. A malicious actor can exploit this to perform XSS attacks remotely, potentially leading to malicious JavaScript insertion or pa...