VDB
Sign up
—

DRUPAL-CORE-2020-010

Quick fix

DRUPAL-CORE-2020-010 — drupal/core: upgrade to the fixed version with the command below.

composer require drupal/core:^8.8.10

Details

Drupal core's built-in CKEditor image caption functionality is vulnerable to XSS.

Are you affected?

Enter the version of the package you're using.

Affected packages

Packagist/drupal/core
Introduced in: 8.0.0Fixed in: 8.8.10
Fixcomposer require drupal/core:^8.8.10

References