CVE-2026-3218

This module adds the favicons generated by `realfavicongenerator.net` to your Drupal site. The module does not filter administrator-entered text, lea...

原文の説明

取得元が公開している説明をそのまま載せています (多くは英語)。

This module adds the favicons generated by realfavicongenerator.net to your Drupal site.

The module does not filter administrator-entered text, leading to a persistent Cross-site scripting (XSS) vulnerability.

This vulnerability is mitigated by the fact that an attacker must have a role with the permission "administer responsive favicons".

出典: OSV.dev (Open Source Vulnerabilities) NVD OSV

Packagist:https://packages.drupal.org/8 drupal/responsive_favicons

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.2"}],"database_specific":{"constraint":"<2.0.2"}}]