Project:
Date:
2018-October-10
Vulnerability:
Cross Site Scripting
Description:
The Lightbox2 module enables you to overlay images on the current page.
The module did not sanitize some inputs when used in combination with a custom view leading to potential Cross Site Scripting (XSS).
Solution:
Install the latest version:
- If you use the Lightbox2 module for Drupal 7.x, upgrade to Lightbox2 release 7.x-2.11
Also see the Lightbox2 project page.
Reported By:
Fixed By:
- joseph.olstad
- Stella Power of the Drupal Security Team
Coordinated By:
- David Stoline of the Drupal Security Team
