CVE-2024-34481 Information

Description

drupal-wiki.com Drupal Wiki before 8.31.1 allows XSS via comments captions and image titles of a Wiki page.

Reference

https://www.secuvera.de/advisories/secuvera-SA-2024-02.txt https://drupal-wiki.com/drupal-wiki-update-8-31/ https://seclists.org/fulldisclosure/2024/May/4