| Package | Affected versions | Patched versions |
|---|---|---|
| drupal/inline_formatter_field | < 4.2.0 | 4.2.0 |
The Inline Formatter Field module allows site builders to template and style entities with a field.
This module does not properly protect against template injection when parsing, allowing users to render protected data or execute unsafe Twig commands.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free