CVE-2025-31675

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal Drupal core allows Cross-Site Scripting XSS.This issue affects Drupal core: from 8.0.0 before 10.3.14, from 10.4.0 before 10.4.5, from 11.0.0 before 11.0.13, from 11.1.0 before 11.1.5. It al...

CVE-2025-31675

CVE-2025-31675 describes an XSS in Drupal core due to improper input neutralization during web page generation. Affected versions are Drupal core 8.0.0 up to 10.3.14, 10.4.0 up to 10.4.5, 11.0.0 up to 11.0.13, and 11.1.0 up to 11.1.5. The issue enables Cross-Site Scripting with network attack vec...

CVE-2025-31675 Drupal core - Moderately critical - Cross Site Scripting - SA-CORE-2025-004

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal Drupal core allows Cross-Site Scripting XSS.This issue affects Drupal core: from 8.0.0 before 10.3.14, from 10.4.0 before 10.4.5, from 11.0.0 before 11.0.13, from 11.1.0 before 11.1.5. It al...