—
DRUPAL-CONTRIB-2021-042
Details
Linkit provides an easy interface for internal and external linking with WYSIWYG editors by using an autocomplete field.
It does not sufficiently sanitize user input.
This vulnerability is mitigated by the fact that an attacker must have a role with the permission to create or edit an entity bundle.
Are you affected?
Enter the version of the package you're using.
Affected packages
Packagist:https://packages.drupal.org/8/drupal/linkit
Introduced in:
0Fixed in: 4.4.0Upgrade drupal/linkit to 4.4.0 or newer (ecosystem packagist:https://packages.drupal.org/8).