CVE-2020-13677
Under some circumstances, the Drupal core JSON:API module does not…
Drupal's JSON:API and REST/File modules allow file uploads through their…
Cross-site Scripting (XSS) vulnerability in Drupal core's sanitization API fails…
Information Disclosure vulnerability in file module of Drupal Core allows…
Cross-site Scripting (XSS) vulnerability in ckeditor of Drupal Core allows…
Cross-site scripting vulnerability in Drupal Core. Drupal AJAX API does…