← Database

CVE-2024-55635

MEDIUM CVSS: 6.1 Published: 2024-12-10 Modified: 2026-06-17

Description

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Drupal Core allows Cross-Site Scripting (XSS).This issue affects Drupal Core: from 7.0 before 7.102.

Affected Platforms

Drupal Drupal

Weakness Type

CWE-79, CWE-79

References