Drupal Obfuscate Cross-Site Scripting Vulnerability

A cross-site scripting (XSS) vulnerability has been identified in the Drupal Obfuscate module, affecting versions prior to 2.0.2. The issue arises from improper input sanitization during web page generation, particularly in sites using ROT13 encoding where an attacker can submit content filtered by the module's Twig filter.

Impact

Exploitation of this vulnerability allows for cross-site scripting, where an attacker can inject malicious scripts that are executed in the context of the user's browser.

Remediation

Users of the Obfuscate module should upgrade to version 2.0.2.