CyberRota Analysis
AI-GeneratedDrupal Canvas versions 0.0.0 to 1.4.2, 1.5.0 to 1.5.2, and 1.6.0 to 1.6.1 are vulnerable to a Cross-Site Scripting (XSS) attack due to improper input neutralization during web page generation. This vulnerability could allow an attacker to inject malicious scripts, potentially compromising user data and session integrity. Organizations using affected versions should prioritize patching to mitigate the risk of exploitation.
Original NVD Description
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Drupal Canvas allows Cross-Site Scripting (XSS). This issue affects Drupal Canvas versions: from 0.0.0 to 1.4.2, from 1.5.0 to 1.5.2, from 1.6.0 to 1.6.1, from 1.7.0 to 1.7.1.
Related CVEs
Other vulnerabilities affecting the same vendor(s)