PT-2022-38351

Published

2022-05-04

·

Updated

2022-05-04

Description by

Score
N/A
Not available

No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.

Image Field Caption (image field caption) adds an extra text area for captions on image fields.
The module doesn't sanitize user input in certain cases, which leads to a Cross-Site-Scripting (XSS) vulnerability.
The vulnerability is mitigated by several permissions, of which at least some are commonly only assigned to either editors, site builders or administrators.
Vendors
Affected products
Related identifiers
DRUPAL-CONTRIB-2022-036
Found an issue in the description? Have something to add? Feel free to write us 👾