Lucene search
+L

1301 matches found

Github Security Blog
Github Security Blog
•added 2025/10/30 12:31 a.m.•22 views

Drupal Currency allows Cross Site Request Forgery

Cross-Site Request Forgery CSRF vulnerability in Drupal Currency allows Cross Site Request Forgery. This issue affects Currency: from 0.0.0 before 3.5.0...

6.5CVSS5.8AI score0.00133EPSS
SaveExploits0References3Affected Software1
EUVD
EUVD
•added 2025/10/30 12:31 a.m.•17 views

EUVD-2025-36876

Drupal Currency allows Cross Site Request Forgery...

6.5CVSS5.8AI score0.00133EPSS
SaveExploits0References2
OSV
OSV
•added 2025/10/30 12:31 a.m.•17 views

GHSA-27FV-RPGJ-4C6M Drupal Currency allows Cross Site Request Forgery

Cross-Site Request Forgery CSRF vulnerability in Drupal Currency allows Cross Site Request Forgery. This issue affects Currency: from 0.0.0 before 3.5.0...

6.5CVSS5.8AI score0.00133EPSS
SaveExploits0References2
OSV
OSV
•added 2025/10/30 12:15 a.m.•16 views

CVE-2025-10930

Cross-Site Request Forgery CSRF vulnerability in Drupal Currency allows Cross Site Request Forgery.This issue affects Currency: from 0.0.0 before 3.5.0...

4.3CVSS5.8AI score0.00133EPSS
SaveExploits0References1
NVD
NVD
•added 2025/10/30 12:15 a.m.•19 views

CVE-2025-10930

Cross-Site Request Forgery CSRF vulnerability in Drupal Currency allows Cross Site Request Forgery.This issue affects Currency: from 0.0.0 before 3.5.0...

6.5CVSS0.00133EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/10/30 12:00 a.m.•17 views

Drupal Currency 安全漏洞

Drupal Currency is a currency conversion plugin for the Drupal community. A security vulnerability exists in Drupal Currency versions prior to 3.5.0 that stems from vulnerability to cross-site request forgery attacks...

6.5CVSS5.7AI score0.00133EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/30 12:00 a.m.•2 views

CVE-2025-10930: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Drupal Currency allows Cross Site Request Forgery.This issue affects Currency: from 0.0.0 before 3.5.0...

6.5CVSS5.8AI score0.00133EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/10/30 12:00 a.m.•2 views

PT-2025-45651

Cross-Site Request Forgery CSRF vulnerability in Drupal Currency allows Cross Site Request Forgery. This issue affects Currency: from 0.0.0 before 3.5.0...

6.5CVSS5.9AI score0.00133EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2025/10/29 11:13 p.m.•27 views

CVE-2025-10930 Currency - Moderately critical - Cross Site Request Forgery - SA-CONTRIB-2025-110

Cross-Site Request Forgery CSRF vulnerability in Drupal Currency allows Cross Site Request Forgery.This issue affects Currency: from 0.0.0 before 3.5.0...

0.00133EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/10/29 11:13 p.m.•9 views

CVE-2025-10930 Currency - Moderately critical - Cross Site Request Forgery - SA-CONTRIB-2025-110

Cross-Site Request Forgery CSRF vulnerability in Drupal Currency allows Cross Site Request Forgery.This issue affects Currency: from 0.0.0 before 3.5.0...

5.8AI score0.00133EPSS
SaveExploits0References1
CVE
CVE
•added 2025/10/29 11:13 p.m.•36 views

CVE-2025-10930

The CVE CVE-2025-10930 concerns Drupal Currency, a Drupal contributed module that handles currency display/conversion. The root cause is a Cross-Site Request Forgery (CSRF) vulnerability, allowing an attacker to forge actions for authenticated users. Affected versions are prior to 3.5.0. Conseque...

6.5CVSS5.8AI score0.00133EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2025/10/29 12:00 a.m.•14 views

PT-2025-44358

Name of the Vulnerable Software and Affected Versions Drupal Currency versions prior to 3.5.0 Description A Cross-Site Request Forgery CSRF issue exists in Drupal Currency. This allows attackers to perform actions on behalf of authenticated users without their knowledge. CSRF occurs when a...

6.5CVSS5.8AI score0.00133EPSS
SaveExploits0References6
RedhatCVE
RedhatCVE
•added 2025/10/28 6:59 a.m.•20 views

CVE-2025-12230

A weakness has been identified in projectworlds Expense Management System 1.0. This impacts an unknown function of the file /public/admin/currencies/create of the component Currency Page. This manipulation causes cross site scripting. It is possible to initiate the attack remotely. The exploit ha...

4.8CVSS3.2AI score0.00259EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/10/28 2:38 a.m.•14 views

CVE-2025-62939

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Joe Open Currency Converter artiss-currency-converter allows Stored XSS.This issue affects Open Currency Converter: from n/a through = 1.5.0...

6.5CVSS6AI score0.00204EPSS
SaveExploits0References1
OSV
OSV
•added 2025/10/27 6:15 a.m.•16 views

CVE-2025-12230

A weakness has been identified in projectworlds Expense Management System 1.0. This impacts an unknown function of the file /public/admin/currencies/create of the component Currency Page. This manipulation causes cross site scripting. It is possible to initiate the attack remotely. The exploit ha...

4.8CVSS4.2AI score0.00259EPSS
SaveExploits1References4
NVD
NVD
•added 2025/10/27 6:15 a.m.•18 views

CVE-2025-12230

A weakness has been identified in projectworlds Expense Management System 1.0. This impacts an unknown function of the file /public/admin/currencies/create of the component Currency Page. This manipulation causes cross site scripting. It is possible to initiate the attack remotely. The exploit ha...

4.8CVSS0.00259EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
•added 2025/10/27 6:02 a.m.•8 views

CVE-2025-12230 projectworlds Expense Management System Currency create cross site scripting

A weakness has been identified in projectworlds Expense Management System 1.0. This impacts an unknown function of the file /public/admin/currencies/create of the component Currency Page. This manipulation causes cross site scripting. It is possible to initiate the attack remotely. The exploit ha...

4.8CVSS4AI score0.00259EPSS
SaveExploits1References4
EUVD
EUVD
•added 2025/10/27 6:02 a.m.•17 views

EUVD-2025-36107

A weakness has been identified in projectworlds Expense Management System 1.0. This impacts an unknown function of the file /public/admin/currencies/create of the component Currency Page. This manipulation causes cross site scripting. It is possible to initiate the attack remotely. The exploit ha...

4.8CVSS3AI score0.00259EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/10/27 6:02 a.m.•32 views

CVE-2025-12230 projectworlds Expense Management System Currency create cross site scripting

A weakness has been identified in projectworlds Expense Management System 1.0. This impacts an unknown function of the file /public/admin/currencies/create of the component Currency Page. This manipulation causes cross site scripting. It is possible to initiate the attack remotely. The exploit ha...

4.8CVSS0.00259EPSS
SaveExploits1References4
CVE
CVE
•added 2025/10/27 6:02 a.m.•36 views

CVE-2025-12230

CVE-2025-12230 affects projectworlds Expense Management System 1.0, specifically the Currency Page component (file /public/admin/currencies/create). The weakness allows cross-site scripting via manipulation of an unknown function in that file. Attacks are described as remote and the exploit is pu...

4.8CVSS4AI score0.00259EPSS
SaveExploits1References4Affected Software1
Rows per page
Query Builder