CVSS base score
What the vulnerability does
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Responsive Favicons allows Cross-Site Scripting (XSS).This issue affects Responsive Favicons: from 0.0.0 before 2.0.2.
Explanation of Vulnerability in Simple Terms
The Responsive Favicons module for Drupal contains a cross-site scripting (XSS) vulnerability in versions before 2.0.2. An attacker can inject malicious scripts that execute in the browsers of site visitors or administrators. The vulnerability likely stems from insufficient sanitization of user-supplied input. Update to version 2.0.2 or later to resolve this issue.
What an attacker can do
Inject malicious scripts that run in visitors' browsers, potentially stealing session tokens or redirecting users.
Potential impact on your site
Visitors and administrators could have their sessions compromised or be redirected to malicious sites via injected scripts.
Conditions required to exploit
Depends on the specific input vector; may require site access or user interaction to trigger the vulnerability.
Key dates
External resources
