medium5.4
CVE-2024-13237
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal File Entity (fieldable files) allows Cross-Site Sc…
Impact
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal File Entity (fieldable files) allows Cross-Site Scripting (XSS).This issue affects File Entity (fieldable files): from 7.X-* before 7.X-2.38.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| File Entity Project | File Entity | from 7.x-2.0 before 7.x-2.38 |