Drupal Post File vulnerabilities

• drupal post file, post file project file +1 more POST File - Critical - Cross Site Scripting, Arbitrary PHP code execution - SA-CONTRIB-2024-060 CVE-2024-13294 Fix available 5.4 MediumNovember 13, 2024
• drupal post file, post file project file +1 more POST File - Moderately critical - Cross Site Request Forgery - SA-CONTRIB-2024-059 CVE-2024-13293 Fix available 3.1 LowNovember 13, 2024