Description
Cross-site Scripting (XSS) vulnerability in Drupal core's sanitization API fails to properly filter cross-site scripting under certain circumstances. This issue affects: Drupal Core 9.1.x versions prior to 9.1.7; 9.0.x versions prior to 9.0.12; 8.9.x versions prior to 8.9.14; 7.x versions prior to 7.80.
Remediation
References
Related Vulnerabilities
WordPress Plugin WP Mega Menu Security Bypass (1.3.9)
Oracle Database Server CVE-2014-6544 Vulnerability (CVE-2014-6544)
Squid Insufficient Verification of Data Authenticity Vulnerability (CVE-2016-4554)
Moodle Improper Authentication Vulnerability (CVE-2010-1613)
Python Uncontrolled Resource Consumption Vulnerability (CVE-2021-3733)