—
DRUPAL-CONTRIB-2022-024
Details
The Custom Breadcrumbs module provides a variety of options for customizing the breadcrumb trail.
The module doesn't sufficiently filter on output, leading to a Cross Site Scripting vulnerability.
This vulnerability is mitigated by the fact that an attacker must have a role with the permission "Administer custom breadcrumbs" permission.
Are you affected?
Enter the version of the package you're using.
Affected packages
Packagist:https://packages.drupal.org/8/drupal/custom_breadcrumbs
Introduced in:
0Fixed in: 1.0.1Upgrade drupal/custom_breadcrumbs to 1.0.1 or newer (ecosystem packagist:https://packages.drupal.org/8).