Unrated severityNVD Advisory· Published Jan 9, 2025· Updated Jan 9, 2025
File Entity (fieldable files) - Moderately critical - Cross Site Scripting, Access bypass - SA-CONTRIB-2024-001
CVE-2024-13237
Description
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal File Entity (fieldable files) allows Cross-Site Scripting (XSS).This issue affects File Entity (fieldable files): from 7.X-* before 7.X-2.38.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2<7.X-2.38+ 1 more
- (no CPE)range: <7.X-2.38
- (no CPE)range: 7.x-*
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.