Threats tagged 'ghsa-pw57-w545-279f'

A Cross-Site Scripting (XSS) vulnerability exists in Drupal core that allows improper neutralization of input during web page generation. This vulnerability affects multiple versions of Drupal core, including versions from 0.0.0 up to 11.2.*, 11.3.0 through 11.3.14, and 11.4.0 through 11.4.4. The vulnerability has a medium severity rating with a CVSS score of 4.7. No known exploits are reported in the wild, and no official patch or remediation details are provided in the available data.