Lucene search
+L

23 matches found

RedhatCVE
RedhatCVE
•added 2025/10/30 11:19 p.m.•8 views

CVE-2025-12083

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal CivicTheme Design System allows Cross-Site Scripting XSS.This issue affects CivicTheme Design System: from 0.0.0 before 1.12.0...

6.1CVSS5.8AI score0.00202EPSS
SaveExploits0References1
OSV
OSV
•added 2025/10/30 12:31 a.m.•21 views

GHSA-H72Q-CQ3W-H3WC Drupal CivicTheme Design System allows Cross-Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal CivicTheme Design System allows Cross-Site Scripting XSS. This issue affects CivicTheme Design System: from 0.0.0 before 1.12.0...

6.1CVSS5.8AI score0.00202EPSS
SaveExploits0References2
Github Security Blog
Github Security Blog
•added 2025/10/30 12:31 a.m.•26 views

Drupal CivicTheme Design System allows Cross-Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal CivicTheme Design System allows Cross-Site Scripting XSS. This issue affects CivicTheme Design System: from 0.0.0 before 1.12.0...

6.1CVSS5.8AI score0.00202EPSS
SaveExploits0References3Affected Software1
EUVD
EUVD
•added 2025/10/30 12:31 a.m.•16 views

EUVD-2025-36873

Drupal CivicTheme Design System allows Cross-Site Scripting XSS...

6.1CVSS5.8AI score0.00202EPSS
SaveExploits0References2
Github Security Blog
Github Security Blog
•added 2025/10/30 12:31 a.m.•26 views

Drupal CivicTheme Design System allows Forceful Browsing

Incorrect Authorization vulnerability in Drupal CivicTheme Design System allows Forceful Browsing. This issue affects CivicTheme Design System: from 0.0.0 before 1.12.0...

7.5CVSS5.8AI score0.00307EPSS
SaveExploits0References3Affected Software1
NVD
NVD
•added 2025/10/30 12:15 a.m.•19 views

CVE-2025-12082

Incorrect Authorization vulnerability in Drupal CivicTheme Design System allows Forceful Browsing.This issue affects CivicTheme Design System: from 0.0.0 before 1.12.0...

7.5CVSS0.00307EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/10/30 12:00 a.m.•2 views

PT-2025-45764

Incorrect Authorization vulnerability in Drupal CivicTheme Design System allows Forceful Browsing. This issue affects CivicTheme Design System: from 0.0.0 before 1.12.0...

7.5CVSS5.8AI score0.00307EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/30 12:00 a.m.•5 views

CVE-2025-12082: Incorrect Authorization

Incorrect Authorization vulnerability in Drupal CivicTheme Design System allows Forceful Browsing.This issue affects CivicTheme Design System: from 0.0.0 before 1.12.0...

7.5CVSS5.8AI score0.00307EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/30 12:00 a.m.•4 views

CVE-2025-12083: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal CivicTheme Design System allows Cross-Site Scripting XSS.This issue affects CivicTheme Design System: from 0.0.0 before 1.12.0...

6.1CVSS5.8AI score0.00202EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/10/30 12:00 a.m.•2 views

PT-2025-45730

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal CivicTheme Design System allows Cross-Site Scripting XSS. This issue affects CivicTheme Design System: from 0.0.0 before 1.12.0...

6.1CVSS5.9AI score0.00202EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2025/10/29 11:14 p.m.•31 views

CVE-2025-12083 CivicTheme Design System - Moderately critical - Cross-site Scripting - SA-CONTRIB-2025-113

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal CivicTheme Design System allows Cross-Site Scripting XSS.This issue affects CivicTheme Design System: from 0.0.0 before 1.12.0...

0.00202EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/10/29 11:14 p.m.•3 views

CVE-2025-12083 CivicTheme Design System - Moderately critical - Cross-site Scripting - SA-CONTRIB-2025-113

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal CivicTheme Design System allows Cross-Site Scripting XSS.This issue affects CivicTheme Design System: from 0.0.0 before 1.12.0...

5.8AI score0.00202EPSS
SaveExploits0References1
OSV
OSV
•added 2025/10/29 11:14 p.m.•13 views

CVE-2025-12083 CivicTheme Design System - Moderately critical - Cross-site Scripting - SA-CONTRIB-2025-113

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal CivicTheme Design System allows Cross-Site Scripting XSS.This issue affects CivicTheme Design System: from 0.0.0 before 1.12.0...

6.1CVSS5.9AI score
SaveExploits0References5
CVE
CVE
•added 2025/10/29 11:14 p.m.•38 views

CVE-2025-12083

The Drupal CivicTheme Design System is vulnerable to a Cross-Site Scripting (XSS) flaw due to improper neutralization of input during web page generation. This vulnerability affects versions 0.0.0 through 1.11.x (before 1.12.0). An attacker could exploit this to execute malicious scripts in a use...

6.1CVSS5.8AI score0.00202EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2025/10/29 11:14 p.m.•26 views

CVE-2025-12082 CivicTheme Design System - Moderately critical - Information disclosure - SA-CONTRIB-2025-112

Incorrect Authorization vulnerability in Drupal CivicTheme Design System allows Forceful Browsing.This issue affects CivicTheme Design System: from 0.0.0 before 1.12.0...

0.00307EPSS
SaveExploits0References1
CVE
CVE
•added 2025/10/29 11:14 p.m.•38 views

CVE-2025-12082

An Incorrect Authorization vulnerability in the Drupal CivicTheme Design System allows for Forceful Browsing . This issue impacts versions from 0.0.0 before 1.12.0 . The root cause stems from improper authorization, which could lead to unauthorized access to restricted information. Remediation is...

7.5CVSS5.8AI score0.00307EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2025/10/29 11:14 p.m.•2 views

CVE-2025-12082 CivicTheme Design System - Moderately critical - Information disclosure - SA-CONTRIB-2025-112

Incorrect Authorization vulnerability in Drupal CivicTheme Design System allows Forceful Browsing.This issue affects CivicTheme Design System: from 0.0.0 before 1.12.0...

5.8AI score0.00307EPSS
SaveExploits0References1
OSV
OSV
•added 2025/10/29 11:14 p.m.•12 views

CVE-2025-12082 CivicTheme Design System - Moderately critical - Information disclosure - SA-CONTRIB-2025-112

Incorrect Authorization vulnerability in Drupal CivicTheme Design System allows Forceful Browsing.This issue affects CivicTheme Design System: from 0.0.0 before 1.12.0...

7.5CVSS5.9AI score
SaveExploits0References5
Patchstack
Patchstack
•added 2025/10/22 12:00 a.m.•22 views

Drupal CivicTheme Design System module < 1.12.0 - Unauthenticated Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS vulnerability discovered by Adam Bramley acbramley in WordPress Module CivicTheme Design System versions 1.12.0...

6.1CVSS5.8AI score0.00202EPSS
SaveExploits0Affected Software1
Positive Technologies
Positive Technologies
•added 2025/10/22 12:00 a.m.•10 views

PT-2025-44361

Name of the Vulnerable Software and Affected Versions Drupal CivicTheme Design System versions prior to 1.12.0 Description A flaw exists in the CivicTheme Design System that allows for Cross-Site Scripting XSS. This occurs due to improper neutralization of input during web page generation. The...

6.1CVSS5.7AI score0.00202EPSS
SaveExploits0References15
Rows per page
Query Builder