| Package | Affected versions | Patched versions |
|---|---|---|
| drupal/core | ≥ 7.0.0, < 7.65.0≥ 8.0.0, < 8.5.14≥ 8.6.0, < 8.6.13 | 7.65.08.5.148.6.13 |
| drupal/drupal | ≥ 7.0.0, < 7.65.0≥ 8.0.0, < 8.5.14≥ 8.6.0, < 8.6.13 | 7.65.08.5.148.6.13 |
| drupal | ≥ 7.0, < 7.65≥ 8.5.0, < 8.5.14≥ 8.6.0, < 8.6.13 | 7.658.5.148.6.13 |
In Drupal 7 versions prior to 7.65; Drupal 8.6 versions prior to 8.6.13;Drupal 8.5 versions prior to 8.5.14. Under certain circumstances the File module/subsystem allows a malicious user to upload a file that can trigger a cross-site scripting (XSS) vulnerability.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free