| Package | Affected versions | Patched versions |
|---|---|---|
| drupal/highlight_js | < 1.3.1 | 1.3.1 |
This module enables you to add syntax-highlighted code snippets to content using CKEditor 5.
The module doesn't sufficiently validate input passed to its CKEditor 5 preview endpoint, leading to a reflected cross-site scripting (XSS) vulnerability.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free