CVE-2025-7715

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal Block Attributes allows Cross-Site Scripting XSS.This issue affects Block Attributes: from 0.0.0 before 1.1.0, from 2.0.0 before 2.0.1...

CVE-2025-7715

creationtimestamp| type| source ---|---|--- 2025-07-22 14:32:42+00:00| seen| Telegram/iBVtramwuoF5K5Jp6DkKuEC2c98KtSVbpfazlCCvu3GHF8...

CVE-2025-7715

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal Block Attributes allows Cross-Site Scripting XSS.This issue affects Block Attributes: from 0.0.0 before 1.1.0, from 2.0.0 before 2.0.1...

CVE-2025-7715 Block Attributes - Moderately critical - Cross-site Scripting - SA-CONTRIB-2025-090

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal Block Attributes allows Cross-Site Scripting XSS.This issue affects Block Attributes: from 0.0.0 before 1.1.0, from 2.0.0 before 2.0.1...

CVE-2025-7715 Block Attributes - Moderately critical - Cross-site Scripting - SA-CONTRIB-2025-090

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal Block Attributes allows Cross-Site Scripting XSS.This issue affects Block Attributes: from 0.0.0 before 1.1.0, from 2.0.0 before 2.0.1...

CVE-2025-7715

The CVE-2025-7715 entry corresponds to a Drupal Block Attributes XSS vulnerability in the Contrib module. Affected versions are block attributes before 1.1.0 and before 2.0.1 (i.e., 0.0.0–1.0.9 and 2.0.0). Root cause is improper neutralization of input during web page generation, enabling Cross-S...