CVE-2025-3733
The baguetteBox.js module provides integration with baguetteBox.js library. The module doesn't sufficiently sanitize user-supplied text values leadin...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
The baguetteBox.js module provides integration with baguetteBox.js library.
The module doesn't sufficiently sanitize user-supplied text values leading to a cross site scripting vulnerability.
Paquets affectés
Packagist:https://packages.drupal.org/8
drupal/baguettebox
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.4"}],"database_specific":{"constraint":"<2.0.4"}},{"type":"ECOSYSTEM","events":[{"introduced":"3.0.0"},{"fixed":"3.0.1"}],"database_specific":{"constraint":">=3.0.0 <3.0.1"}}]
Références
- web drupal.org