Lucene search
+L
Typogrify ProjectTypogrify*

1 matches found

CVE
CVE
added 2025/01/09 6:33 p.m.56 views

CVE-2024-13238

The Drupal Typogrify module contains a persistent XSS when the Twig filter is used in a template, allowing bypass of Twig auto-escape. Root cause: improper input handling in web page generation. Affected: Typogrify up to version 1.3.0 (pre-1.3.0). Mitigation: upgrade to 1.3.0 or apply the provide...

5.4CVSS6.2AI score0.00218EPSS
Save