Multiple vulnerabilities have been reported in Drupal core which could allow an attacker to disclose sensitive information, escalate privileges, execute remote code and perform Cross-site Scripting (XSS) attacks on the targeted system.
Target Audience:
Individuals and end-user organizations using Drupal.
Risk Assessment:
High risk of unauthorized access, privilege escalation, persistent cross-site scripting (XSS), and account takeover.
Impact Assessment:
Potential for account compromise, data exposure, unauthorized access, execute remote code and gain elevated privileges.
The information provided herein is on "as is" basis, without warranty of any kind.