Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
6.1
CVE-2024-34481: drupal-wiki.com Drupal Wiki before 8.31.1 allows XSS via comments, captions, and image titles of a Wiki page.
CVE-2024-34481 · published 2 years ago
Summary
drupal-wiki.com Drupal Wiki before 8.31.1 allows XSS via comments, captions, and image titles of a Wiki page.
What to do
- Update kontextwork drupal_wiki to version 8.31.1 or later.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| kontextwork | drupal_wiki |
< 8.31.1 cpe:2.3:a:kontextwork:drupal_wiki:*:*:*:*:*:*:*:* |
Original advisory text
drupal-wiki.com Drupal Wiki before 8.31.1 allows XSS via comments, captions, and image titles of a Wiki page.
drupal-wiki.com Drupal Wiki before 8.31.1 allows XSS via comments, captions, and image titles of a Wiki page.
References
- http://seclists.org/fulldisclosure/2024/May/4
- https://drupal-wiki.com/drupal-wiki-update-8-31/ Release Notes
- https://seclists.org/fulldisclosure/2024/May/4 Mailing List Third Party Advisory
- https://www.secuvera.de/advisories/secuvera-SA-2024-02.txt Third Party Advisory
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker partial control
Type
CWE-79Cross-site Scripting (XSS)
Timeline
Published5 Jul 2024
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2024-34481 · NVD
Track software like this
Free during beta