Project: Panopoly CoreVersion: 7.x-1.x-devDate: 2017-December-13Security risk: Moderately critical 13∕25 AC:Basic/A:User/CI:Some/II:Some/E:Theoretical/TD:DefaultVulnerability: Cross Site ScriptingDescription:
This module provides common functionality used by other modules in the Panopoly distribution and child distributions, like, Open Atrium.
The module doesn't sufficiently filter node titles used in breadcrumbs when the "Append Page Title to Site Breadcrumb" setting is enabled.
This vulnerability is mitigated by the fact that an attacker must have a role with the ability to create content.
Install the latest version:
- If you use the Panopoly Core module for Drupal 7.x, upgrade to Panopoly Core 7.x-1.49
- David Snopek of the Drupal Security Team