—
DRUPAL-CORE-2021-002
Quick fix
DRUPAL-CORE-2021-002 — drupal/core: upgrade to the fixed version with the command below.
composer require drupal/core:^8.9.14Details
Drupal core's sanitization API fails to properly filter cross-site scripting under certain circumstances.
Not all sites and users are affected, but configuration changes to prevent the exploit might be impractical and will vary between sites. Therefore, we recommend all sites update to this release as soon as possible.
Are you affected?
Enter the version of the package you're using.