Vulnerabilities (CVE)

Filtered by vendor Drupal Subscribe
Filtered by product Entity Embed
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2020-13673 1 Drupal 1 Entity Embed 2024-02-04 2.6 LOW 6.1 MEDIUM
The Entity Embed module provides a filter to allow embedding entities in content fields. In certain circumstances, the filter could allow an unprivileged user to inject HTML into a page when it is accessed by a trusted user with permission to embed entities. In some cases, this could lead to cross-site scripting.