DRUPAL-CONTRIB-2023-043
No scoreFix available
Provides highlight.php integration to Drupal, allowing <code> blocks to be automatically highlighted with the correct language.
The module's Twig function doesn't sufficiently filter user-entered data.
What each source reports
OSVNo score
Provides highlight.php integration to Drupal, allowing <code> blocks to be automatically highlighted with the correct language.
The module's Twig function doesn't sufficiently filter user-entered data.
- Record
DRUPAL-CONTRIB-2023-043- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
drupal/highlight_phpPackagist:https://packages.drupal.org/8 | before 1.0.1 | 1.0.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
DRUPAL-CONTRIB-2023-043 is a vulnerability with no CVSS score yet in drupal/highlight_php, published September 6, 2023. No source lists public exploit code. Fixed in drupal/highlight_php 1.0.1.