PT-2024-10135 · Drupal · Drupal Browser Back Button

Elavarasan R + 1 · Published 2024-12-04 · Updated 2025-09-05 · CVE-2024-13308

Positive Technologies (AI Summary)

CVSS v2.0

5.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Drupal Browser Back Button versions 1.0.0 through 2.0.2

Description The issue is related to improper neutralization of input during web page generation, which allows Cross-Site Scripting (XSS). This can enable a remote attacker to conduct cross-site scripting attacks.

Recommendations For versions 1.0.0 through 2.0.2, update to version 2.0.2 or later to resolve the issue.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

BDU:2025-00393

CVE-2024-13308

DRUPAL-CONTRIB-2024-072

Affected Products

Drupal Browser Back Button

References · 9

• https://osv.dev/vulnerability/CVE-2024-13308 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-13308 · Security Note
• https://bdu.fstec.ru/vul/2025-00393 · Security Note
• https://t.me/cvedetector/14929 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1877720155716821170 · Twitter Post
• https://twitter.com/CVEnew/status/1877620671028801719 · Twitter Post
• https://t.me/cveNotify/134453 · Telegram Post
• https://drupal.org/sa-contrib-2024-072 · Note
• https://vuldb.com/?id.291061 · Note