Alex Bronstein

An issue exists in the Canvas AI submodule where image files uploaded via a custom API for use in the AI web chat are insufficiently validated before being saved to the temporary directory. This improper neutralization of input during web page generation can lead to Cross-Site Scripting (XSS), a condition where malicious scripts are injected into trusted websites.

The Drupal Canvas module has an authorization issue that allows forceful browsing of Canvas Pages when they are unpublished. The module does not adequately validate access to Canvas Pages, potentially allowing unauthorized access. This is mitigated by the fact that content moderation is not enabled by default and archiving is not a feature of the module.

The issue affects Drupal core, allowing Cross-Site Scripting (XSS) due to improper neutralization of input during web page generation.

A cross-site scripting issue is present in jQuery when making Ajax requests to untrusted domains. This issue requires contributed or custom modules to be exploitable.

A cross-site scripting (XSS) issue in the Autocomplete system allows remote attackers to inject arbitrary web script or HTML via a crafted URL, related to uploading files.