CVE-2024-13305

Published: 2025-01-09T21:15Z

Last Modified: 2025-01-10T17:15Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Entity Form Steps allows Cross-Site Scripting (XSS).This issue affects Entity Form Steps: from 0.0.0 before 1.1.4. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt