| Package | Affected versions | Patched versions |
|---|---|---|
| drupal/ai | ≥ 1.5.0, < 1.5.2< 1.4.11 | 1.5.21.4.11 |
This module enables you to use AI on the website.
The module does not sufficiently restrict HTML rendering, allowing cross-site scripting (XSS) under certain conditions.
This vulnerability is mitigated by the fact that an attacker must have access to a text format that can render HTML.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free