CVE-2024-13308

creationtimestamp| type| source ---|---|--- 2025-01-09 20:34:14+00:00| seen| https://infosec.exchange/users/cve/statuses/113800305235617163 2025-01-09 21:16:34+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfdlz3szkz27 2025-01-09 21:18:03+00:00| seen|...

CVE-2024-13308 Browser Back Button - Moderately critical - Cross site scripting - SA-CONTRIB-2024-072

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal Browser Back Button allows Cross-Site Scripting XSS.This issue affects Browser Back Button: from 1.0.0 before 2.0.2...

CVE-2024-13308

CVE-2024-13308 affects the Drupal Browser Back Button module. The vulnerability is an improper neutralization of input during web page generation (XSS) in the module’s back-button block, stemming from insufficient escaping of administrator-entered text. Affected versions: 1.0.0–2.0.2. Impact desc...