Drupal Alert
2367Warning Date
Severity Level
Warning Number
Target Sector
15 June, 2023
● Critical
2023-5632
All
Drupal has released security update to address a vulnerability in the following product:
- Office Hours
- Version 8.x-1.5
- Version 8.x-1.4
- Version 8.x-1.3
- Version 8.x-1.2
- Version 8.x-1.1
- Version 8.x-1.0
An attacker could exploit the vulnerabilities by doing the following:
- Cross Site-Scripting (XSS)
The CERT team encourages users to update the affected versions and to review Drupal security advisory: