CVE-2020-13673
CVE-2020-13673
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 0.3%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
11 Feb 2022Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
The Entity Embed module provides a filter to allow embedding entities in content fields. In certain circumstances, the filter could allow an unprivileged user to inject HTML into a page when it is accessed by a trusted user with permission to embed entities. In some cases, this could lead to cross-site scripting.
Affected products
Drupal · Entity EmbedWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →