CVE-2025-7715

The Drupal Block Attributes module is vulnerable to Cross-Site Scripting (XSS) due to improper input neutralization during web page generation. The issue stems from the module's failure to sufficiently validate provided attributes, allowing attackers to insert JavaScript event attributes like onm...