-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIMiggo AIRoot Cause AnalysisThe vulnerability stems from improper sanitization of link attributes in field formatter output. As this is a field formatter module, the primary suspect is the viewElements method of the formatter plugin class responsible for rendering field values. Drupal's security advisory explicitly states the module required updates to properly handle core's link attribute sanitization, indicating the vulnerability exists in the field rendering workflow. The viewElements method would be the execution point where untrusted link attributes enter the rendering pipeline without adequate validation.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| drupal/rapidoc_elements_field_formatter | composer | < 1.0.1 | 1.0.1 |