Multiple vulnerabilities have been reported in Drupal core, including a critical remote code execution vulnerability in the Field UI module and two cross-site scripting (XSS) vulnerabilities in the Link and Navigation modules. Successful exploitation could allow an attacker to execute arbitrary code or inject malicious scripts into affected Drupal websites.
Target Audience:
All organizations and individuals using affected versions of Drupal core.
Risk Assessment:
Critical risk of remote code execution and unauthorized script execution, potentially leading to compromise of affected Drupal websites.
Impact Assessment:
Successful exploitation could allow arbitrary code execution on the server or execution of malicious scripts in users' browsers, potentially compromising system integrity and exposing sensitive information.
The information provided herein is on "as is" basis, without warranty of any kind.