VDB
CVE-2020-13672
CVE-2020-13672
PUBLISHED
CVSS 6.099999904632568 MEDIUM
Cross-site Scripting (XSS) vulnerability in Drupal core's sanitization API fails to properly filter cross-site scripting under certain circumstances. This issue affects: Drupal Core 9.1.x versions prior to 9.1.7; 9.0.x versions prior to 9.0.12; 8.9.x versions prior to 8.9.14; 7.x versions prior to 7.80.
EPSS 0.67% · 49.4th percentile
Risk Scores
CVSS 3.1
6.099999904632568
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS Score
0.67%
49.4th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Bitnami | drupal | 0, 9.0.0, 9.1.0 |
| Bitnami | drupal | 9.0.0, 9.1.0, 8.9.0 |
Timeline
- Apr 21, 2021 CVE Published
- Feb 12, 2022 EPSS Score
- Apr 6, 2022 EPSS Score
- May 28, 2022 EPSS Score
- Jul 21, 2022 EPSS Score
- Sep 11, 2022 EPSS Score
- Dec 25, 2022 EPSS Score
- Feb 16, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- Apr 9, 2023 EPSS Score
- Jun 1, 2023 EPSS Score
- Jul 24, 2023 EPSS Score