CVE-2025-3735 Panelizer (obsolete) - Critical - Unsupported - SA-CONTRIB-2025-036

Vulnerability in Drupal Panelizer obsolete.This issue affects Panelizer obsolete:...

CVE-2025-3735

A vulnerability exists in the Drupal Panelizer module, which is now classified as obsolete and unsupported . The issue affects all versions (** * ***). While the exact technical root cause is not specified in the provided documents, the project has been marked unsupported due to a known security ...

CVE-2025-3734

The Drupal Stage File Proxy module (versions 0.0.0 through 3.1.4 ) is vulnerable to a Denial of Service attack due to the allocation of resources without limits or throttling (CWE-770 ). The root cause is that the module fails to sufficiently validate the existence of remote files before attempti...

CVE-2025-3734 Stage File Proxy - Moderately critical - Denial of Service - SA-CONTRIB-2025-035

Allocation of Resources Without Limits or Throttling vulnerability in Drupal Stage File Proxy allows Flooding.This issue affects Stage File Proxy: from 0.0.0 before 3.1.5...

CVE-2025-3734 Stage File Proxy - Moderately critical - Denial of Service - SA-CONTRIB-2025-035

Allocation of Resources Without Limits or Throttling vulnerability in Drupal Stage File Proxy allows Flooding.This issue affects Stage File Proxy: from 0.0.0 before 3.1.5...

CVE-2025-3733 baguetteBox.js - Moderately critical - Cross Site Scripting - SA-CONTRIB-2025-034

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal baguetteBox.Js allows Cross-Site Scripting XSS.This issue affects baguetteBox.Js: from 0.0.0 before 2.0.4, from 3.0.0 before 3.0.1...

CVE-2025-3733 baguetteBox.js - Moderately critical - Cross Site Scripting - SA-CONTRIB-2025-034

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal baguetteBox.Js allows Cross-Site Scripting XSS.This issue affects baguetteBox.Js: from 0.0.0 before 2.0.4, from 3.0.0 before 3.0.1...

CVE-2025-3733

The baguetteBox.js module for Drupal contains an Improper Neutralization of Input During Web Page Generation vulnerability, leading to Cross-Site Scripting (XSS) . The root cause is the module's failure to sufficiently sanitize user-supplied text values. This vulnerability affects baguetteBox.js ...

CVE-2025-3733 baguetteBox.js - Moderately critical - Cross Site Scripting - SA-CONTRIB-2025-034

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal baguetteBox.Js allows Cross-Site Scripting XSS.This issue affects baguetteBox.Js: from 0.0.0 before 2.0.4, from 3.0.0 before 3.0.1...

DRUPAL-CONTRIB-2025-039

The security team is marking this project unsupported. There is a known security issue with the project that has not been fixed by the maintainer. If you would like to maintain this project, please read: https://www.drupal.org/node/251466s-becoming-owner-maintainer-or-co-mai...

DRUPAL-CONTRIB-2025-037

The security team is marking this project unsupported. There is a known security issue with the project that has not been fixed by the maintainer. If you would like to maintain this project, please read: https://www.drupal.org/node/251466s-becoming-owner-maintainer-or-co-mai...

DRUPAL-CONTRIB-2025-036

The security team is marking this project unsupported. There is a known security issue with the project that has not been fixed by the maintainer. If you would like to maintain this project, please read: https://www.drupal.org/node/251466s-becoming-owner-maintainer-or-co-mai...

DRUPAL-CONTRIB-2025-034

The baguetteBox.js module provides integration with baguetteBox.js library. The module doesn't sufficiently sanitize user-supplied text values leading to a cross site scripting vulnerability...

BIT-DRUPAL-2025-3057 Drupal core - Critical - Cross site scripting - SA-CORE-2025-001

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal Drupal core allows Cross-Site Scripting XSS.This issue affects Drupal core: from 8.0.0 before 10.3.13, from 10.4.0 before 10.4.3, from 11.0.0 before 11.0.12, from 11.1.0 before 11.1.3...

PT-2025-62925

The security team is marking this project unsupported. There is a known security issue with the project that has not been fixed by the maintainer. If you would like to maintain this project, please read: https://www.drupal.org/node/251466s-becoming-owner-maintainer-or-co-mai...

PT-2025-16801 · Google · Google Maps: Store Locator

Name of the Vulnerable Software and Affected Versions: Google Maps: Store Locator versions . Description: The issue is related to a problem in the Google Maps: Store Locator module for Drupal. Recommendations: For Google Maps: Store Locator versions ., update to a version that includes the fix fo...

CVE-2025-3736: Undefined Security Weakness

Vulnerability in Drupal Simple GTM.This issue affects Simple GTM:...

CVE-2025-3733: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal baguetteBox.Js allows Cross-Site Scripting XSS.This issue affects baguetteBox.Js: from 0.0.0 before 2.0.4, from 3.0.0 before 3.0.1...

Drupal Simple GTM module * - Authenticated Other Vulnerability Type vulnerability

Authenticated Other Vulnerability Type vulnerability discovered by Drupal Security Site in WordPress Module Simple GTM versions...

Drupal Google Optimize security vulnerabilities

Drupal Google Optimize is an online split testing tool for the Drupal community. A security vulnerability exists in Drupal Google Optimize. No information about this vulnerability is available at this time, so stay tuned to CNNVD or the vendor announcement...