Drupal Stage File Proxy module < 3.1.5 - Unauthenticated Denial of Service Attack vulnerability

Unauthenticated Denial of Service Attack vulnerability discovered by Ide Braakman idebr in WordPress Module Stage File Proxy versions 3.1.5...

PT-2025-16803

Name of the Vulnerable Software and Affected Versions Drupal 8 Google Optimize Hide Page affected versions not specified Description The issue affects Drupal 8 Google Optimize Hide Page. No specific details about the nature of the issue or its potential impact are provided. Recommendations At the...

PT-2025-16802

Name of the Vulnerable Software and Affected Versions Drupal Google Optimize versions . Description The issue affects Drupal Google Optimize, but specific details about the nature of the problem are not provided. There is no information available about the estimated number of potentially affected...

Drupal Panelizer security vulnerabilities

Drupal Panelizer is a Drupal module for the Drupal community. A security vulnerability exists in Drupal Panelizer. No information about this vulnerability is available at this time, so please stay tuned to CNNVD or the vendor announcement...

Drupal Drupal 8 Google Optimize Hide Page module * - Authenticated Other Vulnerability Type vulnerability

Authenticated Other Vulnerability Type vulnerability discovered by Drupal Security Site in WordPress Module Drupal 8 Google Optimize Hide Page versions...

CVE-2025-3739: Undefined Security Weakness

Vulnerability in Drupal Drupal 8 Google Optimize Hide Page.This issue affects Drupal 8 Google Optimize Hide Page:...

CVE-2025-3737: Undefined Security Weakness

Vulnerability in Drupal Google Maps: Store Locator.This issue affects Google Maps: Store Locator:...

CVE-2025-3734: Allocation of Resources Without Limits or Throttling

Allocation of Resources Without Limits or Throttling vulnerability in Drupal Stage File Proxy allows Flooding.This issue affects Stage File Proxy: from 0.0.0 before 3.1.5...

CVE-2025-3733: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal baguetteBox.Js allows Cross-Site Scripting XSS.This issue affects baguetteBox.Js: from 0.0.0 before 2.0.4, from 3.0.0 before 3.0.1...

Drupal baguetteBox.Js security vulnerability

Drupal baguetteBox.Js is a Drupal module from the Drupal community. A security vulnerability exists in Drupal baguetteBox.Js versions prior to 2.0.4 and versions prior to 3.0.0 to 3.0.1, which stems from improper input neutralization and could lead to cross-site scripting...

PT-2025-16800 · Drupal · Drupal Simple Gtm

Name of the Vulnerable Software and Affected Versions: Drupal Simple GTM affected versions not specified Description: The issue affects Drupal Simple GTM, but specific details about the nature of the problem are not provided. There is no information available about the estimated number of...

Drupal 8 Google Optimize Hide Page - Critical - Unsupported - SA-CONTRIB-2025-040

The security team is marking this project unsupported. There is a known security issue with the project that has not been fixed by the maintainer. If you would like to maintain this project, please read: https://www.drupal.org/node/251466s-becoming-owner-maintainer-or-co-mai...

CVE-2025-3736: Undefined Security Weakness

Vulnerability in Drupal Simple GTM.This issue affects Simple GTM:...

CVE-2025-3474

Missing Authentication for Critical Function vulnerability in Drupal Panels allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Panels: from 0.0.0 before 4.9.0...

CVE-2025-3131

Cross-Site Request Forgery CSRF vulnerability in Drupal ECA: Event - Condition - Action allows Cross Site Request Forgery.This issue affects ECA: Event - Condition - Action: from 0.0.0 before 1.1.12, from 2.0.0 before 2.0.16, from 2.1.0 before 2.1.7, from 0.0.0 before 1.2...

CVE-2025-3475

Allocation of Resources Without Limits or Throttling, Incorrect Authorization vulnerability in Drupal WEB-T allows Excessive Allocation, Content Spoofing.This issue affects WEB-T: from 0.0.0 before 1.1.0...

Object Injection

drupal/core is vulnerable to Object Injection. The vulnerability is due to improperly controlled modification of dynamically-determined object attributes, which allows attackers to inject and manipulate objects within the application...

Cross-Site Scripting (XSS)

drupal/core is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to improper neutralization of user-supplied input during web page generation, which allows malicious scripts to be executed in the context of a user's browser...

Incorrect Authorization

drupal/core package is vulnerable to Incorrect Authorization. The vulnerability is due to insufficient access controls. This allows forceful browsing in certain core versions, enabling attackers to access restricted resources...

CVE-2025-3475

Allocation of Resources Without Limits or Throttling, Incorrect Authorization vulnerability in Drupal WEB-T allows Excessive Allocation, Content Spoofing.This issue affects WEB-T: from 0.0.0 before 1.1.0...