CVE-2020-13672

score

<0.1

cvss

6.1

epss

0.7%

published

2022-02-11

kev added

—

first seen

2026-10-21

Drupal core's sanitization API contains a cross-site scripting caused by improper filtering, letting attackers execute malicious scripts in the context of the affected website, exploit requires attacker to craft malicious input.