CVE-2024-13305

The Drupal Entity Form Steps module (versions before 1.1.4 ) is vulnerable to Cross-Site Scripting (XSS) due to the lack of protective measures for website structures and failure to escape plain text administrative configurations. A malicious actor with admin access and the 'administer [entity_ty...