CVE-2024-13247

The Drupal Coffee module (versions prior to 1.4.0 ) is vulnerable to Cross-Site Scripting (XSS) due to improper neutralization of input during web page generation. Specifically, the module fails to sufficiently escape menu names when displaying them in a shortcut popup , allowing a malicious acto...