Multiple vulnerabilities in Drupal Core allow an attacker to execute arbitrary code, perform Cross-Site Scripting (XSS) attacks to manipulate data, or redirect users to malicious websites.
| Vendor | Product | Versions |
|---|---|---|
| drupal | drupal extensions | — |
Updated description with more technical detail and changed severity to CRITICAL, indicating that exploits are available and actively being used.
Initial creation
