CVE-2024-13276

Insertion of Sensitive Information Into Sent Data vulnerability in Drupal File Entity fieldable files allows Forceful Browsing.This issue affects File Entity fieldable files: from 7.X- before 7.X-2.39...

CVE-2024-13237

The Drupal File Entity (fieldable files) module is vulnerable to Cross-Site Scripting (XSS) due to improper neutralization of input during web page generation. The flaw occurs because the module failed to sufficiently validate files during a file replacement scenario, which can lead to multiple e...