CVE-2024-13252: TacJS - Moderately critical - Cross Site Scripting - SA-CONTRIB-2024-016
Published Jan 9, 2025
·Updated
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal TacJS allows Cross-Site Scripting (XSS).This issue affects TacJS: from 0.0.0 before 6.5.0.
Affected Software
2 affected components
Drupal TacJS>6.5.0
Tacjs Project Tacjs Drupal>=8.x-1.0<8.x-6.5
Event History
Jan 9, 2025
CVE Published
via MITRE·06:58 PM
Data Sourced
via MITRE·06:58 PM
DescriptionWeakness
Data Sourced
via NVD·07:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-13252?
CVE-2024-13252 is classified as a Cross-Site Scripting (XSS) vulnerability that can lead to significant security risks if exploited.
2
How do I fix CVE-2024-13252?
To fix CVE-2024-13252, upgrade to Drupal TacJS version 6.5.0 or later.
3
What versions of Drupal TacJS are affected by CVE-2024-13252?
CVE-2024-13252 affects Drupal TacJS versions prior to 6.5.0.
4
What kind of attacks can CVE-2024-13252 facilitate?
CVE-2024-13252 can facilitate Cross-Site Scripting (XSS) attacks, allowing attackers to execute arbitrary scripts in a user's browser.
5
Is CVE-2024-13252 a remote vulnerability?
Yes, CVE-2024-13252 is a remote vulnerability that attackers can exploit over the internet.