Project: 
Date: 
2017-December-13
Vulnerability: 
Cross Site Scripting
Description: 

This module provides common functionality used by other modules in the Panopoly distribution and child distributions, like, Open Atrium.

The module doesn't sufficiently filter node titles used in breadcrumbs when the "Append Page Title to Site Breadcrumb" setting is enabled.

This vulnerability is mitigated by the fact that an attacker must have a role with the ability to create content.

Solution: 

Install the latest version:

Reported By: 
Fixed By: 
Coordinated By: