CVSS base score
What the vulnerability does
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Islandora allows Cross-Site Scripting (XSS).This issue affects Islandora: from 0.0.0 before 2.17.5.
Explanation of Vulnerability in Simple Terms
The Islandora Drupal module contains a cross-site scripting (XSS) vulnerability in versions before 2.17.5. An attacker can inject malicious scripts that execute in the browsers of other users viewing affected pages. The vulnerability allows script injection through unvalidated input, potentially compromising user sessions or stealing sensitive data.
What an attacker can do
Inject malicious scripts that run in other users' browsers when they view affected pages.
Potential impact on your site
Site visitors' sessions and data could be compromised; attackers may steal credentials or deface content.
Conditions required to exploit
User interaction required; victim must visit a page containing the attacker's injected payload.
Key dates
External resources
Related vulnerabilities
