Description
Cross-site Scripting (XSS) vulnerability in Drupal core's sanitization API fails to properly filter cross-site scripting under certain circumstances. This issue affects: Drupal Core 9.1.x versions prior to 9.1.7; 9.0.x versions prior to 9.0.12; 8.9.x versions prior to 8.9.14; 7.x versions prior to 7.80.
Remediation
References
Related Vulnerabilities
WordPress Plugin Augmented reality Unspecified Vulnerability (1.2.0)
Squid Missing Release of Memory after Effective Lifetime Vulnerability (CVE-2021-28652)
Apache Tomcat WAR file directory traversal vulnerability
WordPress Plugin InstaWP Connect-1-click WP Staging & Migration Arbitrary File Upload (0.1.0.22)
Sqlite Integer Overflow or Wraparound Vulnerability (CVE-2018-20506)