| Package | Affected versions | Patched versions |
|---|---|---|
| drupal/browser_back_button | ≥ 1.0.0, < 2.0.2 | 2.0.2 |
| browser back button | = 8.x-1.0= 8.x-1.1≥ 2.0.0, < 2.0.2 | 2.0.2 |
This module provides a block that renders a link providing the functionality of a browser's back button.
The module does not sufficiently escape text entered by an administrator, resulting in a cross scripting vulnerability.
This vulnerability is mitigated by the fact that an attacker must have a role with the permission "administer blocks".
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free