—
DRUPAL-CONTRIB-2023-028
Details
This module enables you to render a field in an expandable/collapsible region.
The module doesn't sufficiently sanitize the field content when displaying it to an end user.
This vulnerability is mitigated by the fact that an attacker must have a role capable of creating content that uses the field formatter.
Are you affected?
Enter the version of the package you're using.
Affected packages
Packagist:https://packages.drupal.org/8/drupal/expandable_formatter
Introduced in:
0Fixed in: 1.4.0Upgrade drupal/expandable_formatter to 1.4.0 or newer (ecosystem packagist:https://packages.drupal.org/8).