DRUPAL-CONTRIB-2021-031 The module provides a field widget for selecting taxonomy terms in a hierarchical fashion.
An attacker with taxonomy editing permissions can inject scripts via unsanitized input, potentially compromising user sessions.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is DRUPAL-CONTRIB-2021-031?
DRUPAL-CONTRIB-2021-031 is a cross-site scripting vulnerability in drupal/cshs, published on 22 Sep 2021. Any signed-in user can exploit it over the network, and only if a user opens a file or follows a link.
Official description
The module provides a field widget for selecting taxonomy terms in a hierarchical fashion.
The module doesn't sanitize user input in certain cases, leading to a possible Cross-Site-Scripting (XSS) vulnerability.
This vulnerability is mitigated by the fact that an attacker must have a role with permission to create or edit taxonomy terms to which the widget may apply.
Which versions are affected by DRUPAL-CONTRIB-2021-031?
Linux distribution packages (1)
drupal/cshs Packagist:https://packages.drupal.org/8 | All versions | 3.5.0 |
How do I fix DRUPAL-CONTRIB-2021-031?
Upgrade to a fixed version.
Escape output for the context it lands in and set a strict Content Security Policy. Upgrading the affected component is the real fix. More about Cross-site scripting.
Is DRUPAL-CONTRIB-2021-031 being exploited?
There is no known exploitation of DRUPAL-CONTRIB-2021-031 in the wild and no public exploit code.