Project:
Date:
2023-March-01
Vulnerability:
Cross Site Scripting
Affected versions:
<4.0.3
Description:
This module enables you to add social sharing buttons to a site.
The module doesn't sufficiently sanitize the weight and ratio values entered in the module or block configuration.
This vulnerability is mitigated by the fact that an attacker must have a role with the permission "administer blocks".
Solution:
Install the latest version:
- If you use the Better Social Sharing Buttons module for Drupal 9 or 10, upgrade to Better Social Sharing Buttons 4.0.3
Reported By:
Fixed By:
Coordinated By:
- Damien McKenna of the Drupal Security Team
