6 X 1 0
1 CVEs
product
Monthly
classes/Filter/WhitelistedExternalFilter.php in the Authoring HTML module 6.x-1.x before 6.x-1.1 for Drupal does not properly validate sources with the host white list, which allows remote. Rated low severity (CVSS 3.5), this vulnerability is remotely exploitable. Public exploit code available.
PHP
Privilege Escalation
XSS
6 X 1 0
NVD
CVSS 2.0
3.5
EPSS
0.5%
EPSS 0%
CVSS 3.5
LOW
POC
PATCH
Monitor
classes/Filter/WhitelistedExternalFilter.php in the Authoring HTML module 6.x-1.x before 6.x-1.1 for Drupal does not properly validate sources with the host white list, which allows remote. Rated low severity (CVSS 3.5), this vulnerability is remotely exploitable. Public exploit code available.
PHP
Privilege Escalation
XSS
+1
NVD