| Package | Affected versions | Patched versions |
|---|---|---|
| drupal/location_selector | < 1.3.0 | 1.3.0 |
| location selector | < 1.3 | 1.3 |
The Location Selector module provides a Views filter for selecting location values.
One of the provided Views filters does not sufficiently sanitize values that may come from user input, resulting in a SQL injection vulnerability.
This vulnerability is mitigated by the fact that a View must exist that uses the affected filter and is configured to accept user input.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free