PT-2020-23065 · Packagist · Drupal/Easy Breadcrumb

Published

2020-07-22

·

Updated

2020-07-22

None

No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
This module enables you to use the current URL (path alias) and the current page's title to automatically extract the breadcrumb's segments and its respective links then show them as breadcrumbs on your website.
The module doesn't sufficiently sanitize editor input in certain circumstances leading to a Cross Site Scripting (XSS) vulnerability.
This vulnerability requires the user have 'administer Easy Breadcrumb settings permission'.
Found an issue in the description? Have something to add? Feel free to write us 👾

Related Identifiers

DRUPAL-CONTRIB-2020-027

Affected Products

Drupal/Easy Breadcrumb