vulnerability

FreeBSD: VID-95d9d986-1078-11eb-ab74-4c72b94353b5: drupal -- Multiple Vulnerabilities

Severity

CVSS

(AV:N/AC:M/Au:N/C:P/I:P/A:N)

Published

Oct 17, 2020

Added

Oct 18, 2020

Modified

Dec 10, 2025

Description

Drupal Security Team reports: The Drupal AJAX API does not disable JSONP by default, which can lead to cross-site scripting.

freebsd-upgrade-package-drupal7

Rapid7 Labs

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.