Drupal Update
2498Warning Date
Severity Level
Warning Number
Target Sector
22 April, 2021
● Critical
2021-2818
All
Description:
Drupal has released a security update to address multiple vulnerabilities in the following product:
- Drupal core
- Drupal 7
- Drupal 8.8
- Drupal 8.9
- Drupal 9.0
- Drupal 9.1
Threats:
Attacker could exploit these vulnerabilities by doing the following:
- Cross-site scripting (XSS)
Best practice and Recommendations:
The CERT team encourages users to update the affected versions and to review Drupal security advisory: