| Package | Affected versions | Patched versions |
|---|---|---|
| drupal/core | ≥ 11.0.0, < 11.3.19≥ 11.4.0, < 11.4.10≥ 12.0.0-alpha1, < 12.0.0-beta2≥ 8.9.0, < 10.6.19 | 11.3.1911.4.1012.0.0-beta210.6.19 |
The Drupal core Link module provides a field type that can be used for internal and external URLs.
The module does not sufficiently sanitize certain markup in some circumstances, which can lead to cross-site scripting (XSS) vulnerabilities.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free