Lucene search
+L

31 matches found

RedhatCVE
RedhatCVE
•added 2025/10/30 11:19 p.m.•8 views

CVE-2025-12083

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal CivicTheme Design System allows Cross-Site Scripting XSS.This issue affects CivicTheme Design System: from 0.0.0 before 1.12.0...

6.1CVSS5.8AI score0.00202EPSS
SaveExploits0References1
OSV
OSV
•added 2025/10/30 12:31 a.m.•21 views

GHSA-H72Q-CQ3W-H3WC Drupal CivicTheme Design System allows Cross-Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal CivicTheme Design System allows Cross-Site Scripting XSS. This issue affects CivicTheme Design System: from 0.0.0 before 1.12.0...

6.1CVSS5.8AI score0.00202EPSS
SaveExploits0References2
Github Security Blog
Github Security Blog
•added 2025/10/30 12:31 a.m.•26 views

Drupal CivicTheme Design System allows Cross-Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal CivicTheme Design System allows Cross-Site Scripting XSS. This issue affects CivicTheme Design System: from 0.0.0 before 1.12.0...

6.1CVSS5.8AI score0.00202EPSS
SaveExploits0References3Affected Software1
EUVD
EUVD
•added 2025/10/30 12:31 a.m.•16 views

EUVD-2025-36873

Drupal CivicTheme Design System allows Cross-Site Scripting XSS...

6.1CVSS5.8AI score0.00202EPSS
SaveExploits0References2
Github Security Blog
Github Security Blog
•added 2025/10/30 12:31 a.m.•26 views

Drupal CivicTheme Design System allows Forceful Browsing

Incorrect Authorization vulnerability in Drupal CivicTheme Design System allows Forceful Browsing. This issue affects CivicTheme Design System: from 0.0.0 before 1.12.0...

7.5CVSS5.8AI score0.00307EPSS
SaveExploits0References3Affected Software1
OSV
OSV
•added 2025/10/30 12:31 a.m.•22 views

GHSA-QXR9-F877-9842 Drupal CivicTheme Design System allows Forceful Browsing

Incorrect Authorization vulnerability in Drupal CivicTheme Design System allows Forceful Browsing. This issue affects CivicTheme Design System: from 0.0.0 before 1.12.0...

7.5CVSS5.8AI score0.00307EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/30 12:31 a.m.•20 views

EUVD-2025-36874

Drupal CivicTheme Design System allows Forceful Browsing...

7.5CVSS5.8AI score0.00307EPSS
SaveExploits0References2
NVD
NVD
•added 2025/10/30 12:15 a.m.•18 views

CVE-2025-12083

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal CivicTheme Design System allows Cross-Site Scripting XSS.This issue affects CivicTheme Design System: from 0.0.0 before 1.12.0...

6.1CVSS0.00202EPSS
SaveExploits0References1
NVD
NVD
•added 2025/10/30 12:15 a.m.•19 views

CVE-2025-12082

Incorrect Authorization vulnerability in Drupal CivicTheme Design System allows Forceful Browsing.This issue affects CivicTheme Design System: from 0.0.0 before 1.12.0...

7.5CVSS0.00307EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/10/30 12:00 a.m.•17 views

Drupal CivicTheme Design System 安全漏洞

Drupal CivicTheme Design System is a theme design plugin for the Drupal community. A security vulnerability exists in Drupal CivicTheme Design System versions prior to 1.12.0 that stems from improper authorization and could lead to a forced browsing attack...

7.5CVSS5.8AI score0.00307EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/10/30 12:00 a.m.•2 views

PT-2025-45764

Incorrect Authorization vulnerability in Drupal CivicTheme Design System allows Forceful Browsing. This issue affects CivicTheme Design System: from 0.0.0 before 1.12.0...

7.5CVSS5.8AI score0.00307EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/30 12:00 a.m.•5 views

CVE-2025-12082: Incorrect Authorization

Incorrect Authorization vulnerability in Drupal CivicTheme Design System allows Forceful Browsing.This issue affects CivicTheme Design System: from 0.0.0 before 1.12.0...

7.5CVSS5.8AI score0.00307EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/30 12:00 a.m.•4 views

CVE-2025-12083: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal CivicTheme Design System allows Cross-Site Scripting XSS.This issue affects CivicTheme Design System: from 0.0.0 before 1.12.0...

6.1CVSS5.8AI score0.00202EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/10/30 12:00 a.m.•2 views

PT-2025-45730

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal CivicTheme Design System allows Cross-Site Scripting XSS. This issue affects CivicTheme Design System: from 0.0.0 before 1.12.0...

6.1CVSS5.9AI score0.00202EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/10/30 12:00 a.m.•18 views

Drupal CivicTheme Design System 安全漏洞

Drupal CivicTheme Design System is a theme design plugin for the Drupal community. A security vulnerability exists in Drupal CivicTheme Design System versions prior to 1.12.0, which stems from improper input neutralization during page generation and could lead to a cross-site scripting attack...

6.1CVSS5.6AI score0.00202EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/10/29 11:14 p.m.•31 views

CVE-2025-12083 CivicTheme Design System - Moderately critical - Cross-site Scripting - SA-CONTRIB-2025-113

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal CivicTheme Design System allows Cross-Site Scripting XSS.This issue affects CivicTheme Design System: from 0.0.0 before 1.12.0...

0.00202EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/10/29 11:14 p.m.•3 views

CVE-2025-12083 CivicTheme Design System - Moderately critical - Cross-site Scripting - SA-CONTRIB-2025-113

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal CivicTheme Design System allows Cross-Site Scripting XSS.This issue affects CivicTheme Design System: from 0.0.0 before 1.12.0...

5.8AI score0.00202EPSS
SaveExploits0References1
CVE
CVE
•added 2025/10/29 11:14 p.m.•40 views

CVE-2025-12083

The Drupal CivicTheme Design System is vulnerable to a Cross-Site Scripting (XSS) flaw due to improper neutralization of input during web page generation. This vulnerability affects versions 0.0.0 through 1.11.x (before 1.12.0). An attacker could exploit this to execute malicious scripts in a use...

6.1CVSS5.8AI score0.00202EPSS
SaveExploits0References1Affected Software1
OSV
OSV
•added 2025/10/29 11:14 p.m.•13 views

CVE-2025-12083 CivicTheme Design System - Moderately critical - Cross-site Scripting - SA-CONTRIB-2025-113

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal CivicTheme Design System allows Cross-Site Scripting XSS.This issue affects CivicTheme Design System: from 0.0.0 before 1.12.0...

6.1CVSS5.9AI score
SaveExploits0References5
Cvelist
Cvelist
•added 2025/10/29 11:14 p.m.•26 views

CVE-2025-12082 CivicTheme Design System - Moderately critical - Information disclosure - SA-CONTRIB-2025-112

Incorrect Authorization vulnerability in Drupal CivicTheme Design System allows Forceful Browsing.This issue affects CivicTheme Design System: from 0.0.0 before 1.12.0...

0.00307EPSS
SaveExploits0References1
Rows per page
Query Builder