| Package | Affected versions | Patched versions |
|---|---|---|
| drupal/quickedit | ≥ 2.0.0, < 2.0.1< 1.0.5 | 2.0.11.0.5 |
| quick edit | = 2.0.0< 1.0.5 | 1.0.5 |
This module allows content to be edited in-place.
The module doesn't sufficiently sanitize certain image-related values during the editing process leading to a persistent Cross-site Scripting (XSS) vulnerability.
This vulnerability is mitigated by the fact that an attacker must have permission to create or edit an affected field.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free