CVE-2025-7715

The Drupal Block Attributes module is vulnerable to Cross-Site Scripting (XSS) due to improper neutralization of input during web page generation. The module fails to sufficiently validate provided attributes, allowing for the injection of JavaScript event attributes like onmouseover or onkeyup, ...