Moderately Critical Context Module Security Update
This module enables you to conditionally display blocks in particular theme regions.
The module doesn't sufficiently sanitize the title of a block as displayed in the admin UI when a site administrator edits a context block reaction.
According to Drupal.org this vulnerability is mitigated by the fact that an attacker must have a role with the permission "administer blocks".
Solution:
Install the latest version:
If you use the Context module for Drupal 7.x, upgrade to Context 7.x-3.11.
Source:
ASK: Drupal Community Needs Your Support
View all →
Note: The vision of this web portal is to help promote news and stories around the Drupal community and promote and celebrate the people and organizations in the community. We strive to create and distribute our content based on these content policy. If you see any omission/variation on this please reach out to us at #thedroptimes channel on Drupal Slack and we will try to address the issue as best we can.
You may also like
