CVE-2025-3901

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal Bootstrap Site Alert allows Cross-Site Scripting XSS.This issue affects Bootstrap Site Alert: from 0.0.0 before 1.13.0, from 3.0.0 before 3.0.4...

CVE-2025-3901 Bootstrap Site Alert - Moderately critical - Cross Site Scripting - SA-CONTRIB-2025-042

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal Bootstrap Site Alert allows Cross-Site Scripting XSS.This issue affects Bootstrap Site Alert: from 0.0.0 before 1.13.0, from 3.0.0 before 3.0.4...

CVE-2025-3901

The Drupal Bootstrap Site Alert module is vulnerable to a Cross-Site Scripting (XSS) attack due to insufficient filtering of text input. This vulnerability affects versions before 1.13.0 and 3.0.0 before 3.0.4 . Impacting the web page generation, the flaw allows an attacker to execute malicious s...