CVE-2024-13238
The Drupal Typogrify module contains a persistent XSS when the Twig filter is used in a template, allowing bypass of Twig auto-escape. Root cause: improper input handling in web page generation. Affected: Typogrify up to version 1.3.0 (pre-1.3.0). Mitigation: upgrade to 1.3.0 or apply the provide...