DRUPAL-CONTRIB-2023-024

DRUPAL-CONTRIB-2023-024

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This module enables you to create dynamic layouts and add sample color palettes for color selection hints via its UI. The module doesn't sufficiently sanitize the module's settings in certain scenarios leading to a Cross Site Scripting vulnerability. This vulnerability is mitigated by the fact that an attacker must have a role with the permissions "administer gridstack".

Fix available

Published

2023-06-28T17:03:36Z

Updated

2026-09-10T03:45:54.640960247Z

Stack: php

Check your server →