CVE-2024-13308

The Drupal Browser Back Button module (versions 1.0.0 through 2.0.2 ) is vulnerable to Cross-Site Scripting (XSS) due to improper input neutralization during web page generation. Specifically, the module fails to sufficiently escape text entered by an administrator, allowing a remote attacker to ...