Lucene search
K

11 matches found

RedhatCVE
RedhatCVE
added 2026/01/15 7:24 p.m.2 views

CVE-2025-14556

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Drupal Flag allows Cross-Site Scripting XSS.This issue affects Flag: from 7.X-3.0 through 7.X-3.9...

5.4CVSS5.8AI score0.00052EPSS
Exploits1References1
OSV
OSV
added 2026/01/14 7:16 p.m.0 views

CVE-2025-14556

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Drupal Flag allows Cross-Site Scripting XSS.This issue affects Flag: from 7.X-3.0 through 7.X-3.9...

5.4CVSS5.8AI score0.00052EPSS
Exploits1References2
NVD
NVD
added 2026/01/14 7:16 p.m.4 views

CVE-2025-14556

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Drupal Flag allows Cross-Site Scripting XSS.This issue affects Flag: from 7.X-3.0 through 7.X-3.9...

5.4CVSS0.00052EPSS
Exploits1References2
Vulnrichment
Vulnrichment
added 2026/01/14 6:38 p.m.3 views

CVE-2025-14556 XSS in Drupal 7 Flag Module

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Drupal Flag allows Cross-Site Scripting XSS.This issue affects Flag: from 7.X-3.0 through 7.X-3.9...

4.8CVSS5.5AI score0.00052EPSS
Exploits1References2
ATTACKERKB
ATTACKERKB
added 2026/01/14 6:38 p.m.1 views

CVE-2025-14556

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Drupal Flag allows Cross-Site Scripting XSS.This issue affects Flag: from 7.X-3.0 through 7.X-3.9...

5.4CVSS5.4AI score0.00052EPSS
Exploits1References3Affected Software1
CVE
CVE
added 2026/01/14 6:38 p.m.7 views

CVE-2025-14556

CVE-2025-14556 is an XSS in the Drupal Flag module. Affected: Drupal Flag versions 7.X-3.0 through 7.X-3.9 . Root cause: improper neutralization of input during web page generation . Impact: Cross-Site Scripting (XSS) vulnerability; attacker could inject scripts when users view pages. Exploitatio...

5.4CVSS5.5AI score0.00052EPSS
Exploits1References2Affected Software1
Cvelist
Cvelist
added 2026/01/14 6:38 p.m.18 views

CVE-2025-14556 XSS in Drupal 7 Flag Module

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Drupal Flag allows Cross-Site Scripting XSS.This issue affects Flag: from 7.X-3.0 through 7.X-3.9...

4.8CVSS0.00052EPSS
Exploits1References2
CNNVD
CNNVD
added 2026/01/14 12:0 a.m.1 views

Drupal Flag 安全漏洞

Drupal Flag is a markup creation module for the Drupal community. A security vulnerability exists in Drupal Flag versions 7.X-3.0 through 7.X-3.9, which stems from improper input neutralization during page generation and could lead to a cross-site scripting attack...

5.4CVSS6AI score0.00052EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2026/01/14 12:0 a.m.4 views

PT-2026-2941

Name of the Vulnerable Software and Affected Versions Drupal Flag versions 7.X-3.0 through 7.X-3.9 Description A flaw exists in Drupal Flag that allows for Cross-Site Scripting XSS. This issue is due to improper neutralization of input during web page generation. An attacker could potentially...

5.4CVSS6AI score0.00052EPSS
Exploits1References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2013-5794

Malware in sbrugna...

2.1CVSS6.4AI score0.00232EPSS
Exploits0References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2014-3465

Malware in sbrugna...

6.5CVSS6.1AI score0.0046EPSS
Exploits1References5
Rows per page
Query Builder