Drupal cross-site scripting vulnerability (CNVD-2018-21851)

Drupal is a free, open-source content management system developed in the PHP language and maintained by the Drupal community. A cross-site scripting vulnerability exists in the search autofill feature in Drupal version 7.x. The vulnerability stems from the program improperly validating...