CyberRota Analysis
AI-GeneratedDrupal Canvas versions from 0.0.0 to 1.4.2, 1.5.0 to 1.5.2, 1.6.0 to 1.6.1, and 1.7.0 to 1.7.1 are vulnerable to a Cross-Site Scripting (XSS) attack due to improper input neutralization during web page generation. This vulnerability could allow attackers to inject malicious scripts, potentially compromising user data and session integrity. Organizations using affected versions of Drupal Canvas should prioritize patching to mitigate the risk of exploitation.
Original NVD Description
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Drupal Canvas allows Cross-Site Scripting (XSS). This issue affects Drupal Canvas versions: from 0.0.0 to 1.4.2, from 1.5.0 to 1.5.2, from 1.6.0 to 1.6.1, from 1.7.0 to 1.7.1.
Related CVEs
Other vulnerabilities affecting the same vendor(s)