Lucene search
+L

1 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/10 12:00 a.m.•1 views

CVE-2025-11570: Improper Neutralization of Input During Web Page Generation

Versions of the package drupal-pattern-lab/unified-twig-extensions from 0.0.0 are vulnerable to Cross-site Scripting XSS due to insufficient filtering of data. Note: This is exploitable only if the code is executed outside of Drupal; the function is intended to be shared between Drupal and Patter...

4.8CVSS5.8AI score0.00218EPSS
SaveExploits0References2
Rows per page
Query Builder