Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:6769
HistoryJun 11, 2018 - 6:15 a.m.

Cross-site Scripting (XSS)

2018-06-1106:15:24
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
11

EPSS

0.002

Percentile

56.3%

drupal/drupal is vulnerable to cross-site scripting (XSS) attacks. The vulnerability exists due to the inclusion of a vulnerable jQuery which allows untrusted domains request through AJAX requests, allowing XSS to occur.