Panopoly Core - Moderately critical - Cross Site Scripting - SA-CONTRIB-2017-093

Project: Panopoly CoreVersion: 7.x-1.x-devDate: 2017-December-13Security risk: Moderately critical 13∕25 AC:Basic/A:User/CI:Some/II:Some/E:Theoretical/TD:DefaultVulnerability: Cross Site ScriptingDescription: 

This module provides common functionality used by other modules in the Panopoly distribution and child distributions, like, Open Atrium.

The module doesn't sufficiently filter node titles used in breadcrumbs when the "Append Page Title to Site Breadcrumb" setting is enabled.

This vulnerability is mitigated by the fact that an attacker must have a role with the ability to create content.


Install the latest version:

Reported By: 

Fixed By: 

Coordinated By: