Back to Codebase

Vulnerability Analysis Report

Drupal Core v5.15

Scan ID: SCAN-DRUPAL-CORE-Ifo6Ln • Hash: 8760d018

Severity Score
Medium
Total Findings
3
Engine Version
ECOMGUARD-HYBRID-AST-1.5
Scan Duration
0.419s

Vulnerability Details

L101

Insecure DOM Manipulation (XSS) in progress.js

CWE-79
File Location: misc/progress.js:101
Security Score:
74 / 100
Needs Audit

Rule Engine Warning

Detected insecure pattern matching known vulnerability signatures. Medium Confidence (Fuzzy matcher overlap - minor review required). Please apply remediation steps matching the recommended patch format below.

Heuristics Diff
- error.innerHTML = string;
+ element.textContent = data; // Or use DOMPurify to sanitize HTML output
L64

Insecure DOM Manipulation (XSS) in collapse.js

CWE-79
File Location: misc/collapse.js:64
Security Score:
71 / 100
Needs Audit

Rule Engine Warning

Detected insecure pattern matching known vulnerability signatures. Medium Confidence (Fuzzy matcher overlap - minor review required). Please apply remediation steps matching the recommended patch format below.

Heuristics Diff
- var text = this.innerHTML;
+ element.textContent = data; // Or use DOMPurify to sanitize HTML output
L56

Insecure DOM Manipulation (XSS) in drupal.js

CWE-79
File Location: misc/drupal.js:56
Security Score:
69 / 100
Needs Audit

Rule Engine Warning

Detected insecure pattern matching known vulnerability signatures. Medium Confidence (Fuzzy matcher overlap - minor review required). Please apply remediation steps matching the recommended patch format below.

Heuristics Diff
- response = (iframe.contentWindow || iframe.contentDocument || iframe).document.body.innerHTML;
+ element.textContent = data; // Or use DOMPurify to sanitize HTML output