CVE-2024-13247 | HackTesting

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Coffee allows Cross-Site Scripting (XSS).This issue affects Coffee: from 0.0.0 before 1.4.0.

Credits

Patrick Fey

Michael Mol

Klaus Purer

Oliver KÃ¶hler

Greg Knaddison

References

https://www.drupal.org/sa-contrib-2024-011