Drupal Core Cross-Site Scripting Vulnerability

A cross-site scripting (XSS) vulnerability has been identified in Drupal Core. This issue arises from improper input neutralization during web page generation, allowing for the injection of malicious scripts. The vulnerability affects Drupal Core versions 8.0.0 prior to 10.3.13, 10.4.0 prior to 10.4.3, 11.0.0 prior to 11.0.12, and 11.1.0 prior to 11.1.3.

Impact

Exploitation of this vulnerability allows for cross-site scripting, where an attacker can inject malicious scripts that are executed in the context of the user's browser.