Filtered by vendor Drupal Subscriptions
Filtered by product Entity Embed Subscriptions
Total 1 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2020-13673 1 Drupal 1 Entity Embed 2024-11-21 6.1 Medium
The Entity Embed module provides a filter to allow embedding entities in content fields. In certain circumstances, the filter could allow an unprivileged user to inject HTML into a page when it is accessed by a trusted user with permission to embed entities. In some cases, this could lead to cross-site scripting.