—
DRUPAL-CONTRIB-2026-009
Details
This module allows content to be edited in-place.
The module doesn't sufficiently sanitize certain image-related values during the editing process leading to a persistent Cross-site Scripting (XSS) vulnerability.
This vulnerability is mitigated by the fact that an attacker must have permission to create or edit an affected field.
Are you affected?
Enter the version of the package you're using.
Affected packages
Packagist:https://packages.drupal.org/8/drupal/quickedit
Introduced in:
0Fixed in: 1.0.5Upgrade drupal/quickedit to 1.0.5 or newer (ecosystem packagist:https://packages.drupal.org/8).