{"id":"drupal-security-9af4e9341a47","seq":2029,"kind":"advisory","title":"Drupal core - Critical - Cross Site Scripting - SA-CORE-2024-005","url":"https://www.drupal.org/sa-core-2024-005","permalink":"https://vulnpulse.app/items/drupal-security-9af4e9341a47","summary":"Project: Drupal core Project machine name: drupal Date: 2024-November-20 Security risk: Critical 17 ∕ 25 AC:None/A:None/CI:Some/II:Some/E:Theoretical/TD:Default Vulnerability: Cross Site Scripting Affected versions: >=7.0 <7.102 CVE IDs: CVE-2024-55635 Description: Drupal 7 core's Overlay module doesn't safely handle user input, leading to reflected cross-site scripting under certain circumstances. Only sites with the Overlay module enabled are affected by this vulnerability. Solution: Install the latest version: If you are using Drupal 7, update to Drupal 7.102 Sites may also disable the Ove…","severity":"critical","techs":["drupal","php"],"cves":["CVE-2024-55635"],"tags":["security"],"source":{"id":"drupal-security","name":"Drupal Security Advisories"},"published_at":"2024-11-20T17:24:02.000Z","fetched_at":"2026-10-21T16:17:45.699Z"}