DRUPAL-CONTRIB-2026-003
See a problem?- Import Source
- https://github.com/DrupalSecurityTeam/drupal-advisory-database/blob/main/advisories/atsmarttag/DRUPAL-CONTRIB-2026-003.json
- JSON Data
- https://api.osv.dev/v1/vulns/DRUPAL-CONTRIB-2026-003
- Published
- 2026-01-14T17:55:41Z
- Modified
- 2026-01-14T20:47:30.962028Z
- Summary
- [none]
- Details
-
This module integrates the AT Internet SmartTag service.
The module does not filter administrator-entered text leading to a persistent Cross-site Scripting (XSS) vulnerability.
This vulnerability is mitigated by the fact that an attacker must have a role with the permission "administer atsmarttag".
- References
- Credits
-
-
- Pierre Rudloff (prudloff)
-
Affected packages
Packagist:https://packages.drupal.org/8 / drupal/atsmarttag
Package
- Name
- drupal/atsmarttag
- Purl
- pkg:composer/drupal/atsmarttag