{"id":"DRUPAL-CONTRIB-2020-027","details":"This module enables you to use the current URL (path alias) and the current page's title to automatically extract the breadcrumb's segments and its respective links then show them as breadcrumbs on your website.\n\nThe module doesn't sufficiently sanitize editor input in certain circumstances leading to a Cross Site Scripting (XSS) vulnerability.\n\nThis vulnerability requires the user have 'administer Easy Breadcrumb settings permission'.","modified":"2026-09-10T03:45:28.704787029Z","published":"2020-07-22T17:58:17Z","references":[{"type":"WEB","url":"https://www.drupal.org/sa-contrib-2020-027"}],"affected":[{"package":{"name":"drupal/easy_breadcrumb","ecosystem":"Packagist:https://packages.drupal.org/8","purl":"pkg:composer/drupal/easy_breadcrumb?repository_url=https:%2F%2Fpackages.drupal.org%2F8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.0"}],"database_specific":{"constraint":"\u003c1.13.0"}}],"database_specific":{"affected_versions":"\u003c1.13.0","source":"https://github.com/DrupalSecurityTeam/drupal-advisory-database/blob/main/advisories/easy_breadcrumb/DRUPAL-CONTRIB-2020-027.json"}}],"schema_version":"1.9.0","credits":[{"name":"Greg Boggs","contact":["https://www.drupal.org/user/153069"]}]}