CVE-2025-12761

The Drupal Simple multi step form module is vulnerable to a Cross-Site Scripting (XSS) flaw in versions prior to 2.0.0 . The root cause is the improper neutralization of input during web page generation, which could allow an attacker to inject malicious scripts into web pages viewed by other user...