CVE-2025-3130

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal Obfuscate allows Stored XSS.This issue affects Obfuscate: from 0.0.0 before 2.0.1...

CVE-2025-3130

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal Obfuscate allows Stored XSS.This issue affects Obfuscate: from 0.0.0 before 2.0.1...

CVE-2025-3130

creationtimestamp| type| source ---|---|--- 2025-04-02 21:34:07+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10141 2025-04-02 23:01:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lluikveyby2k 2025-04-03 01:01:19+00:00| seen| https://t.me/cvedetector/21915...

CVE-2025-3130 Obfuscate - Moderately critical - Cross Site Scripting - SA-CONTRIB-2025-029

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal Obfuscate allows Stored XSS.This issue affects Obfuscate: from 0.0.0 before 2.0.1...

CVE-2025-3130 Obfuscate - Moderately critical - Cross Site Scripting - SA-CONTRIB-2025-029

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal Obfuscate allows Stored XSS.This issue affects Obfuscate: from 0.0.0 before 2.0.1...

CVE-2025-3130

The Drupal Obfuscate module is vulnerable to Stored Cross-Site Scripting (XSS) in versions prior to 2.0.1 . The root cause is the improper neutralization of input when ROT13 encoding is used, as the module fails to sufficiently sanitize input in this context. While the impact is significant, the ...