PT-2026-5198 · Drupal · Drupal Mini
CVSS v3.1
5.4
Medium
| Vector | AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
Drupal Mini site versions prior to 3.0.2
Description
A flaw exists in Drupal Mini site that allows for Stored Cross-Site Scripting (XSS) due to unsafe actions with defined privileges. This allows an attacker to inject malicious scripts into the system, potentially compromising user accounts or website integrity.
Recommendations
Update Drupal Mini site to version 3.0.2 or later.
Exploit
Fix
XSS
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Drupal Mini