CVE-2024-55635

score

<0.1

cvss

6.1

epss

0.3%

published

2024-12-10

kev added

—

first seen

2026-10-21

Drupal Core from 7.0 before 7.102 contains a cross-site scripting caused by improper neutralization of input during web page generation, letting attackers execute arbitrary scripts in the context of the affected website, exploit requires attacker to send malicious input.