Threats tagged 'drupal-contrib-2026-332'

The Drupal smart_trim module contains a vulnerability where unsafe HTML is not sufficiently escaped when processed through its Twig filter, potentially allowing content injection. This issue requires an attacker to have a role capable of posting content that is rendered using the module's Twig filters. Sites using only the field formatter without the Twig filter are not vulnerable. Fixed versions 2.2.2 and 2.3.2 address this issue.