Lucene search
+L

3 matches found

OSV
OSV
added 2025/04/23 4:58 p.m.10 views

DRUPAL-CONTRIB-2025-042

This module enables you to put a site wide bootstrap themed alert message on the top of every page. The module doesn't sufficiently filter text input when leading to a possible XSS attacks. This vulnerability is mitigated by the fact that an attacker must have a role with the permission "administ...

6.1CVSS6.1AI score0.00216EPSS
SaveExploits0References1
Drupal
Drupal
added 2025/04/23 12:0 a.m.22 views

Bootstrap Site Alert - Moderately critical - Cross Site Scripting - SA-CONTRIB-2025-042

This module enables you to put a site wide bootstrap themed alert message on the top of every page. The module doesn't sufficiently filter text input when leading to a possible XSS attacks. This vulnerability is mitigated by the fact that an attacker must have a role with the permission "administ...

6.1CVSS5.8AI score0.00216EPSS
SaveExploits0References3
CNVD
CNVD
added 2017/05/24 12:0 a.m.3 views

Drupal Bootstrap Module Information Disclosure Vulnerability

Drupal is a free, open-source content management system developed in the PHP language and maintained by the Drupal community. An information disclosure vulnerability exists in the Drupal Bootstrap module. An attacker can exploit this vulnerability to obtain sensitive information leading to furthe...

6.2AI score
SaveExploits0References1
Rows per page
Query Builder