VYPR
← All advisories
Medium severity4.8NVD Advisory· Published Jan 9, 2025· Updated Jun 17, 2026

CVE-2024-13298

CVE-2024-13298

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Tarte au Citron allows Cross-Site Scripting (XSS).This issue affects Tarte au Citron: from 2.0.0 before 2.0.5.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Kleegroup/Tarte Au Citron
    cpe:2.3:a:kleegroup:tarte_au_citron:*:*:*:*:*:drupal:*:*
    Range: >=2.0.0,<2.0.5
  • Drupal/Tarte au Citronllm-fuzzy2 versions
    from 2.0.0 before 2.0.5+ 1 more
    • (no CPE)range: from 2.0.0 before 2.0.5
    • (no CPE)range: 2.0.0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.