CVE-2024-13308

creationtimestamp| type| source ---|---|--- 2025-01-09 20:34:14+00:00| seen| https://infosec.exchange/users/cve/statuses/113800305235617163 2025-01-09 21:16:34+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfdlz3szkz27 2025-01-09 21:18:03+00:00| seen|...

CVE-2024-13308 Browser Back Button - Moderately critical - Cross site scripting - SA-CONTRIB-2024-072

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal Browser Back Button allows Cross-Site Scripting XSS.This issue affects Browser Back Button: from 1.0.0 before 2.0.2...

CVE-2024-13308

The Drupal Browser Back Button module (versions 1.0.0 through 2.0.1 ) is vulnerable to Cross-Site Scripting (XSS) due to a lack of sufficient input neutralization during web page generation. Specifically, the module fails to properly escape text entered by an administrator when rendering the back...