Project:
Date:
2018-July-11
Security risk:
Vulnerability:
Cross Site Scripting
Description:
This theme features 4 built-in color styles, 18 collapsible regions, Suckerfish menus, flexible widths, adjustable sidebars, configurable font family, and lots more.
The theme doesn't sufficiently sanitize user input.
This vulnerability is mitigated by the fact that the theme is not exploitable under common site configurations.
Solution:
- If you use the Beale Street theme for Drupal 7.x, upgrade to Beale Street 7.x-1.2
Also see the Beale Street project page.
Reported By:
Fixed By:
Coordinated By:
- Michael Hess of the Drupal Security Team
