| Package | Affected versions | Patched versions |
|---|---|---|
| drupal/content_synchronizer | < 4.1.1 | 4.1.1 |
The Content Synchronizer module allows content to be exported and imported between Drupal sites via uploaded archive files.
The module doesn't sufficiently sanitize input passed to its client-side code, leading to a DOM-based cross-site scripting (XSS) vulnerability.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free