Lucene search
K

8 matches found

Veracode
Veracode
added 4 days ago5 views

Cross-Site Scripting (XSS)

Drupal Ignition Error Pages is vulnerable to Cross-Site Scripting XSS.The vulnerability is due to improper neutralization of user-controlled input during web page generation, which allows an attacker to inject and execute malicious scripts in a user's browser through crafted input...

6.1CVSS5.5AI score0.00551EPSS
Exploits0References1Affected Software1
Github Security Blog
Github Security Blog
added 2025/04/01 12:30 a.m.12 views

Drupal Ignition Cross-Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal Ignition Error Pages allows Cross-Site Scripting XSS. This issue affects Ignition Error Pages: from 0.0.0 before 1.0.4...

6.1CVSS6.5AI score0.00551EPSS
Exploits0References3Affected Software1
NVD
NVD
added 2025/03/31 10:15 p.m.5 views

CVE-2025-31679

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal Ignition Error Pages allows Cross-Site Scripting XSS.This issue affects Ignition Error Pages: from 0.0.0 before 1.0.4...

6.1CVSS0.00551EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/03/31 9:38 p.m.14 views

CVE-2025-31679 Ignition Error Pages - Critical - Cross Site Scripting - SA-CONTRIB-2025-007

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal Ignition Error Pages allows Cross-Site Scripting XSS.This issue affects Ignition Error Pages: from 0.0.0 before 1.0.4...

0.00551EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/03/31 9:38 p.m.5 views

CVE-2025-31679 Ignition Error Pages - Critical - Cross Site Scripting - SA-CONTRIB-2025-007

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal Ignition Error Pages allows Cross-Site Scripting XSS.This issue affects Ignition Error Pages: from 0.0.0 before 1.0.4...

6.1AI score0.00551EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/03/31 12:0 a.m.3 views

Drupal Ignition Error Pages 跨站脚本漏洞

Drupal Ignition Error Pages is a module of the Drupal community that provides custom error pages e.g. 404, 500, etc. to improve the user experience. A cross-site scripting vulnerability exists in Drupal Ignition Error Pages versions prior to 1.0.4, which stems from improper input neutralization a...

6.1CVSS5.7AI score0.00551EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/03/31 12:0 a.m.1 views

PT-2025-13843 · Drupal · Ignition Error Pages

Name of the Vulnerable Software and Affected Versions: Ignition Error Pages versions 0.0.0 through 1.0.3 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS, in Drupal Ignition Error Pages. This allows for...

6.1CVSS5.6AI score0.00551EPSS
Exploits0References7
Drupal
Drupal
added 2025/01/22 12:0 a.m.15 views

Ignition Error Pages - Critical - Cross Site Scripting - SA-CONTRIB-2025-007

This module enables you to render error pages using the Ignition package. The module disables certain Drupal core code and does not perform sufficient filtering, allowing HTML to be injected in certain situations leading to a Cross Site Scripting XSS vulnerability. This vulnerability is mitigated...

6.1CVSS6.2AI score0.00551EPSS
Exploits0References8
Rows per page
Query Builder