| Package | Affected versions | Patched versions |
|---|---|---|
| drupal/fullcalendar_view | < 5.2.6 | 5.2.6 |
This module provides a View plugin that integrates a calendar view format powered by FullCalendar JavaScript library.
This module has an access bypass vulnerability which allows to update entity fields without checking field-level access.
The vulnerability is mitigated by the fact that an attacker must have access to update the entity itself.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free