{"id":"DRUPAL-CONTRIB-2022-036","aliases":[],"title":"DRUPAL-CONTRIB-2022-036","description":"Image Field Caption (`image_field_caption`) adds an extra text area for captions on image fields.\n\nThe module doesn't sanitize user input in certain cases, which leads to a Cross-Site-Scripting (XSS) vulnerability.\n\nThe vulnerability is mitigated by several permissions, of which at least some are commonly only assigned to either editors, site builders or administrators.","severity":"unknown","score":null,"published":"2022-05-04T16:11:07.000Z","modified":"2026-09-10T03:45:32.684Z","withdrawn":false,"knownExploited":false,"affected":[{"ecosystem":"Packagist:https://packages.drupal.org/8","name":"drupal/image_field_caption","ranges":[{"events":[{"introduced":"0"},{"fixed":"1.2.0"}],"type":"ECOSYSTEM","database_specific":{"constraint":"<1.2.0"}}],"versions":[],"fixed":["1.2.0"]}],"references":["https://www.drupal.org/sa-contrib-2022-036"],"sources":[{"name":"OSV","id":"DRUPAL-CONTRIB-2022-036","modified":"2026-09-10T03:45:32.684562701Z","url":"https://osv.dev/vulnerability/DRUPAL-CONTRIB-2022-036"}],"assessments":[]}