Incorrect Authorization vulnerability in Drupal CivicTheme Design System allows Forceful Browsing.This issue affects CivicTheme Design System: from 0.0.0 before 1.12.0.
Products Affected
| Vendor | Product | Version |
|---|---|---|
| salsa.digital | civictheme_design_system | * |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal CivicTheme Design System allows Cross-Site Scripting (XSS).This issue affects CivicTheme Design System: from 0.0.0 before 1.12.0.
Products Affected
| Vendor | Product | Version |
|---|---|---|
| salsa.digital | civictheme_design_system | * |
Privilege Defined With Unsafe Actions vulnerability in Drupal Mini site allows Stored XSS.This issue affects Mini site: from 0.0.0 before 3.0.2.
Products Affected
| Vendor | Product | Version |
|---|---|---|
| salsa.digital | mini_site | * |