Description
Cross-site Scripting (XSS) vulnerability in Drupal core's sanitization API fails to properly filter cross-site scripting under certain circumstances. This issue affects: Drupal Core 9.1.x versions prior to 9.1.7; 9.0.x versions prior to 9.0.12; 8.9.x versions prior to 8.9.14; 7.x versions prior to 7.80.
Remediation
References
Related Vulnerabilities
WordPress Plugin Helios Solutions Brand Logo Slider Arbitrary File Upload (2.1)
WordPress Plugin WP Support Plus Responsive Ticket System Privilege Escalation (7.1.4)
WordPress Plugin WP Limit Login Attempts Security Bypass (2.6.4)
Oracle JRE CVE-2019-2977 Vulnerability (CVE-2019-2977)
WordPress Plugin BezahlCode-Generator 'gen_name' Parameter Cross-Site Scripting (1.0)