CVE-2024-13262

The View Password module for the Drupal CMS is vulnerable to Cross-Site Scripting (XSS) due to improper neutralization of input during web page generation. Specifically, the module fails to validate the content of the classes field, which allows administrators to add CSS classes for styling the p...