| Package | Affected versions | Patched versions |
|---|---|---|
| drupal/facets | ≥ 3.0.0, < 3.0.1< 2.0.10 | 3.0.12.0.10 |
| facets | ≥ 3.0.0, < 3.0.1< 2.0.10 | 3.0.12.0.10 |
This module enables you to to easily create and manage faceted search interfaces.
The module doesn’t sufficiently filter certain user-provided text leading to a cross site scripting (XSS) vulnerability.
This vulnerability is mitigated by the fact that an attacker must have a role with the permission “administer facets”.
CVSS risk score (experimental) 4.8 / Medium
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:L/SI:N/SA:N
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free