PT-2021-31132 · Packagist · Drupal/Cshs
Published
2021-09-22
·
Updated
2021-09-22
None
No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
The module provides a field widget for selecting taxonomy terms in a hierarchical fashion.
The module doesn't sanitize user input in certain cases, leading to a possible Cross-Site-Scripting (XSS) vulnerability.
This vulnerability is mitigated by the fact that an attacker must have a role with permission to create or edit taxonomy terms to which the widget may apply.
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Drupal/Cshs