Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Drupal Subscribe
Filtered by product Entity Embed
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2020-13673 1 Drupal 1 Entity Embed 2022-07-25 2.6 LOW 6.1 MEDIUM
The Entity Embed module provides a filter to allow embedding entities in content fields. In certain circumstances, the filter could allow an unprivileged user to inject HTML into a page when it is accessed by a trusted user with permission to embed entities. In some cases, this could lead to cross-site scripting.