Drupal Bootstrap Site Alert module < 1.13.0,3.0.0-3.0.3 - Unauthenticated Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS vulnerability discovered by Mitch Portier arkener in WordPress Module Bootstrap Site Alert versions 1.13.0,3.0.0-3.0.3...

CVE-2025-3907: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Drupal Search API Solr allows Cross Site Request Forgery.This issue affects Search API Solr: from 0.0.0 before 4.3.9...

CVE-2025-3901: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal Bootstrap Site Alert allows Cross-Site Scripting XSS.This issue affects Bootstrap Site Alert: from 0.0.0 before 1.13.0, from 3.0.0 before 3.0.4...

Drupal Search API Solr module < 4.3.9 - Unauthenticated Cross Site Request Forgery (CSRF) vulnerability

Unauthenticated Cross Site Request Forgery CSRF vulnerability discovered by Pierre Rudloff prudloff in WordPress Module Search API Solr versions 4.3.9...

📄 Drupal 11.x-dev Path Disclosure

Drupal version 11.x-dev suffers from a path disclosure vulnerability. !/usr/bin/env python Exploit Title: Drupal 11.x-dev - Full Path Disclosure Date: 2025-04-16 Exploit Author: Milad Karimi Ex3ptionaL Contact: [email protected] Zone-H: www.zone-h.org/archive/notifier=Ex3ptionaL MiRROR-H:...

Drupal 11.x-dev - Full Path Disclosure

!/usr/bin/env python Exploit Title: Drupal 11.x-dev - Full Path Disclosure Date: 2025-04-16 Exploit Author: Milad Karimi Ex3ptionaL Contact: [email protected] Zone-H: www.zone-h.org/archive/notifier=Ex3ptionaL MiRROR-H: https://mirror-h.org/search/hacker/49626/ Version: 11.x-dev CVE:...

CVE-2025-3735

Vulnerability in Drupal Panelizer obsolete.This issue affects Panelizer obsolete:...

CVE-2025-3736

Vulnerability in Drupal Simple GTM.This issue affects Simple GTM:...

CVE-2025-3737

Vulnerability in Drupal Google Maps: Store Locator.This issue affects Google Maps: Store Locator:...

CVE-2025-3739

Vulnerability in Drupal Drupal 8 Google Optimize Hide Page.This issue affects Drupal 8 Google Optimize Hide Page:...

CVE-2025-3738

Vulnerability in Drupal Google Optimize.This issue affects Google Optimize:...

CVE-2025-3734

Allocation of Resources Without Limits or Throttling vulnerability in Drupal Stage File Proxy allows Flooding.This issue affects Stage File Proxy: from 0.0.0 before 3.1.5...

CVE-2025-3733

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal baguetteBox.Js allows Cross-Site Scripting XSS.This issue affects baguetteBox.Js: from 0.0.0 before 2.0.4, from 3.0.0 before 3.0.1...

CVE-2025-3739 Drupal 8 Google Optimize Hide Page - Critical - Unsupported - SA-CONTRIB-2025-040

Vulnerability in Drupal Drupal 8 Google Optimize Hide Page.This issue affects Drupal 8 Google Optimize Hide Page:...

CVE-2025-3739 Drupal 8 Google Optimize Hide Page - Critical - Unsupported - SA-CONTRIB-2025-040

Vulnerability in Drupal Drupal 8 Google Optimize Hide Page.This issue affects Drupal 8 Google Optimize Hide Page:...

CVE-2025-3739

A security vulnerability exists in the Drupal 8 Google Optimize Hide Page module (all versions). The issue is classified as an Authenticated Other Vulnerability Type , requiring high privileges for exploitation. Notably, the project has been marked as unsupported by the Drupal security team due t...

CVE-2025-3738 Google Optimize - Critical - Unsupported - SA-CONTRIB-2025-039

Vulnerability in Drupal Google Optimize.This issue affects Google Optimize:...

CVE-2025-3738 Google Optimize - Critical - Unsupported - SA-CONTRIB-2025-039

Vulnerability in Drupal Google Optimize.This issue affects Google Optimize:...

CVE-2025-3738

The Drupal Google Optimize module (versions **ecommend**) is subject to a vulnerability identified as CVE-2025-3738 . The project has been marked as unsupported by the security team due to a known security issue that has not been addressed by the maintainer. While the vulnerability is categorized...

CVE-2025-3737

The Drupal Google Maps: Store Locator module is affected by an Authenticated Other Vulnerability Type vulnerability. While specific root cause details are not provided in the documents, the issue is significant enough that the Drupal security team has marked the project as unsupported due to a kn...