Drupal Update
2542Warning Date
Severity Level
Warning Number
Target Sector
19 March, 2020
● High
2020-1042
All
Description:
Drupal has released a security update to address a vulnerability in the following product:
- CKEditor
- Drupal 8.8.x
- Drupal 8.7.x
Threats:
Attacker could exploit this vulnerability by doing the following:
- Cross-site scripting (XSS)
Best practice and Recommendations:
The CERT team encourages users to update the affected versions and to review Drupal security advisory: