CVE-2024-13294

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal POST File allows Cross-Site Scripting XSS.This issue affects POST File: from 0.0.0 before 1.0.2...

CVE-2024-13294

The Drupal POST File module (versions before 1.0.2 ) is vulnerable to Cross-Site Scripting (XSS) due to improper neutralization of input during web page generation. A malicious actor can exploit this flaw to perform XSS attacks remotely. While the module provides an endpoint at /postfile/upload f...