CVE-2024-13301

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal OAuth & OpenID Connect Single Sign On – SSO OAuth/OIDC Client allows Cross-Site Scripting XSS.This issue affects OAuth & OpenID Connect Single Sign On – SSO OAuth/OIDC Client: from 3.0.0...

CVE-2024-13301

The Drupal OAuth & OpenID Connect Single Sign On – SSO (OAuth/OIDC Client) module is vulnerable to Cross-Site Scripting (XSS) due to improper neutralization of input during web page generation. The root cause is the module's failure to sufficiently escape query parameters sent to the callback URL...