Vulnerability DRUPAL-CONTRIB-2020-027
Unknown
UNKNOWN RISK
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
6 years ago
July 22, 2020 at 05:58 PM UTC
No summary available
Details
This module enables you to use the current URL (path alias) and the current page's title to automatically extract the breadcrumb's segments and its respective links then show them as breadcrumbs on your website.
The module doesn't sufficiently sanitize editor input in certain circumstances leading to a Cross Site Scripting (XSS) vulnerability.
This vulnerability requires the user have 'administer Easy Breadcrumb settings permission'.
References
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Impacted packages
Timeline
Published
6 years ago
July 22, 2020 at 05:58 PM UTC
Last Modified
28 days ago
September 10, 2026 at 03:45 AM UTC