—
DRUPAL-CONTRIB-2024-047
Details
This module enables you to to easily create and manage faceted search interfaces.
The module doesn't sufficiently filter for malicious script leading to a reflected cross site scripting (XSS) vulnerability.
The vulnerability exists in the Facets Summary submodule. If you do not use that sub module your site is not vulnerable to this issue.
*Edited October 9, 2024: clarified that Facets Summary is where the vulnerability is located*
Are you affected?
Enter the version of the package you're using.
Affected packages
Packagist:https://packages.drupal.org/8/drupal/facets
Introduced in:
0Fixed in: 2.0.9Upgrade drupal/facets to 2.0.9 or newer (ecosystem packagist:https://packages.drupal.org/8).