—
DRUPAL-CONTRIB-2024-072
Details
This module provides a block that renders a link providing the functionality of a browser's back button.
The module does not sufficiently escape text entered by an administrator, resulting in a cross scripting vulnerability.
This vulnerability is mitigated by the fact that an attacker must have a role with the permission "administer blocks".
Are you affected?
Enter the version of the package you're using.
Affected packages
Packagist:https://packages.drupal.org/8/drupal/browser_back_button
Introduced in:
1.0.0Fixed in: 2.0.2Upgrade drupal/browser_back_button to 2.0.2 or newer (ecosystem packagist:https://packages.drupal.org/8).