CVE-2024-13308: Browser Back Button Project Browser Back Button

Low severity, CVSS 3.8. EPSS: 0.3% chance of exploitation in the next 30 days.

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Browser Back Button allows Cross-Site Scripting (XSS).This issue affects Browser Back Button: from 1.0.0 before 2.0.2.

Affected products

• Browser Back Button Project Browser Back Button: from 2.0.0, before 2.0.2 (fixed in 2.0.2); version 8.x-1.0 only; version 8.x-1.1 only

Published 2025-01-09. Last modified 2026-06-17.