CVE-2025-3061

Vulnerability in Drupal Material Admin.This issue affects Material Admin:...

CVE-2025-3059

Vulnerability in Drupal Profile Private.This issue affects Profile Private:...

CVE-2025-3062

Vulnerability in Drupal Drupal Admin LTE theme.This issue affects Drupal Admin LTE theme:...

CVE-2025-3060

Vulnerability in Drupal Flattern – Multipurpose Bootstrap Business Profile.This issue affects Flattern – Multipurpose Bootstrap Business Profile:...

Cross-site Scripting (XSS)

Overview drupal/core is an an open source content management platform powering millions of websites and applications. Affected versions of this package are vulnerable to Cross-site Scripting XSS in the error handling in DefaultExceptionHtmlSubscriber.php, which does not sufficiently filter its...

CVE-2025-3062 Drupal Admin LTE theme - Critical - Unsupported - SA-CONTRIB-2025-010

Vulnerability in Drupal Drupal Admin LTE theme.This issue affects Drupal Admin LTE theme:...

CVE-2025-3062

CVE-2025-3062 describes a vulnerability in the Drupal Admin LTE theme affecting the Admin LTE-based backend theme for Drupal. The CVSS 3.1 base score is 6.6 (Medium) with network attack vector, high attack complexity, and high privileges required, yielding high impacts to confidentiality, integri...

CVE-2025-3062 Drupal Admin LTE theme - Critical - Unsupported - SA-CONTRIB-2025-010

Vulnerability in Drupal Drupal Admin LTE theme.This issue affects Drupal Admin LTE theme:...

CVE-2025-3061 Material Admin - Critical - Unsupported - SA-CONTRIB-2025-006

Vulnerability in Drupal Material Admin.This issue affects Material Admin:...

CVE-2025-3061

CVE-2025-3061 concerns Drupal Material Admin (Material Admin module). Affects Drupal Material Admin across versions (per PT-2025-13861: all versions). The CVE entry in NVD/NVD-derived feeds lists a CVSSv3.1 vector: AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H with base score 6.6 (MEDIUM), indicating netwo...

CVE-2025-3060 Flattern – Multipurpose Bootstrap Business Profile - Critical - Unsupported - SA-CONTRIB-2025-005

Vulnerability in Drupal Flattern – Multipurpose Bootstrap Business Profile.This issue affects Flattern – Multipurpose Bootstrap Business Profile:...

CVE-2025-3060

CVE-2025-3060 affects Drupal Flattern – Multipurpose Bootstrap Business Profile. Multiple records (NVD, CVE list, OSV, CVSS metrics) indicate a vulnerability with SA-CONTRIB-2025-005 labeling it Critical and Unsupported. CVSS v3.1 metrics present: AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H, base score 6...

CVE-2025-3060 Flattern – Multipurpose Bootstrap Business Profile - Critical - Unsupported - SA-CONTRIB-2025-005

Vulnerability in Drupal Flattern – Multipurpose Bootstrap Business Profile.This issue affects Flattern – Multipurpose Bootstrap Business Profile:...

CVE-2025-3059 Profile Private - Critical - Unsupported - SA-CONTRIB-2025-002

Vulnerability in Drupal Profile Private.This issue affects Profile Private:...

CVE-2025-3059 Profile Private - Critical - Unsupported - SA-CONTRIB-2025-002

Vulnerability in Drupal Profile Private.This issue affects Profile Private:...

CVE-2025-3059

Technical details for CVE-2025-3059 are not publicly provided in the supplied documents. Monitor for updates.

CVE-2025-3057

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal Drupal core allows Cross-Site Scripting XSS.This issue affects Drupal core: from 8.0.0 before 10.3.13, from 10.4.0 before 10.4.3, from 11.0.0 before 11.0.12, from 11.1.0 before 11.1.3...

CVE-2025-31694

Incorrect Authorization vulnerability in Drupal Two-factor Authentication TFA allows Forceful Browsing.This issue affects Two-factor Authentication TFA: from 0.0.0 before 1.10.0...

CVE-2025-31694

Incorrect Authorization vulnerability in Drupal Two-factor Authentication TFA allows Forceful Browsing.This issue affects Two-factor Authentication TFA: from 0.0.0 before 1.10.0...

CVE-2025-31696

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal RapiDoc OAS Field Formatter allows Cross-Site Scripting XSS.This issue affects RapiDoc OAS Field Formatter: from 0.0.0 before 1.0.1...