Security Moderately Critical XSS Vulnerability Discovered in CKEditor CKEditor has released a security update SA- Core-2021-011 that impacts Drupal. The issue, dated November 17, 2021, is classified as a moderately critical cross-site scripting (XSS) vulnerability. ...more Read Full Content
Security Backport Server Configuration Code to Drupal 7 Backport of the Drupal 8 security fix though not required in Drupal 7 it would mitigate the issue when using vulnerable codes or libraries. ...more Read Full Content
Security Drupal Releases Updates Against CKEditor Vulnerabilities Drupal recently released security updates due to the vulnerabilities in a third-party text editor bundled with it called CKEditor. ...more Read Full Content