CVE-2025-3739 Drupal 8 Google Optimize Hide Page - Critical - Unsupported - SA-CONTRIB-2025-040

Vulnerability in Drupal Drupal 8 Google Optimize Hide Page.This issue affects Drupal 8 Google Optimize Hide Page:...

CVE-2025-3739 Drupal 8 Google Optimize Hide Page - Critical - Unsupported - SA-CONTRIB-2025-040

Vulnerability in Drupal Drupal 8 Google Optimize Hide Page.This issue affects Drupal 8 Google Optimize Hide Page:...

CVE-2025-3739

CVE-2025-3739 : A vulnerability in Drupal 8 Google Optimize Hide Page affects the Drupal 8 Google Optimize Hide Page module. The CVSSv3.1 metrics indicate a network attack vector, high attack complexity, and that an attacker requires high privileges with no user interaction to achieve a Confident...

CVE-2025-3738 Google Optimize - Critical - Unsupported - SA-CONTRIB-2025-039

Vulnerability in Drupal Google Optimize.This issue affects Google Optimize:...

CVE-2025-3738

Technical details about CVE-2025-3738 are not publicly provided in the supplied documents. Monitor for updates from Drupal SA-Contrib-2025-039 and related advisories.

CVE-2025-3738 Google Optimize - Critical - Unsupported - SA-CONTRIB-2025-039

Vulnerability in Drupal Google Optimize.This issue affects Google Optimize:...

CVE-2025-3737

CVE-2025-3737 concerns the Drupal module Google Maps: Store Locator . Across the provided sources, the vulnerability is described as affecting the Store Locator component for Drupal Google Maps, with the SA-CONTRIB-2025-038 entry labeling the issue as critical and the project as unsupported. The ...

CVE-2025-3737 Google Maps: Store Locator - Critical - Unsupported - SA-CONTRIB-2025-038

Vulnerability in Drupal Google Maps: Store Locator.This issue affects Google Maps: Store Locator:...

CVE-2025-3736 Simple GTM - Critical - Unsupported - SA-CONTRIB-2025-037

Vulnerability in Drupal Simple GTM.This issue affects Simple GTM:...

CVE-2025-3736 Simple GTM - Critical - Unsupported - SA-CONTRIB-2025-037

Vulnerability in Drupal Simple GTM.This issue affects Simple GTM:...

CVE-2025-3736

Technical details about CVE-2025-3736 are not publicly available in the provided documents. Monitor for updates from Drupal SA-Contrib, vendor advisories, and CVE listings.

CVE-2025-3735

Technical details (affected versions, root cause, exploitability, and fixes) are not publicly provided in the supplied documents. Monitor DRUPAL SA-CONTRIB-2025-036 and related advisories for updates.

CVE-2025-3735 Panelizer (obsolete) - Critical - Unsupported - SA-CONTRIB-2025-036

Vulnerability in Drupal Panelizer obsolete.This issue affects Panelizer obsolete:...

CVE-2025-3735 Panelizer (obsolete) - Critical - Unsupported - SA-CONTRIB-2025-036

Vulnerability in Drupal Panelizer obsolete.This issue affects Panelizer obsolete:...

CVE-2025-3734 Stage File Proxy - Moderately critical - Denial of Service - SA-CONTRIB-2025-035

Allocation of Resources Without Limits or Throttling vulnerability in Drupal Stage File Proxy allows Flooding.This issue affects Stage File Proxy: from 0.0.0 before 3.1.5...

CVE-2025-3734

CVE-2025-3734 describes an instance of uncontrolled resource allocation in the Drupal Stage File Proxy module. The issue allows flooding and potential Denial of Service because the module does not enforce limits/throttling on resource usage, leading to exhaustion under load. Affected versions are...

CVE-2025-3734 Stage File Proxy - Moderately critical - Denial of Service - SA-CONTRIB-2025-035

Allocation of Resources Without Limits or Throttling vulnerability in Drupal Stage File Proxy allows Flooding.This issue affects Stage File Proxy: from 0.0.0 before 3.1.5...

CVE-2025-3733

CVE-2025-3733 covers a Cross-Site Scripting (XSS) vulnerability in the Drupal baguetteBox.Js integration. The issue stems from improper input neutralization in baguetteBox.Js when used in Drupal. Affected versions are baguetteBox.Js 0.0.0 through 2.0.3 and 3.0.0 through 3.0.0. Remediation, where ...

CVE-2025-3733 baguetteBox.js - Moderately critical - Cross Site Scripting - SA-CONTRIB-2025-034

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal baguetteBox.Js allows Cross-Site Scripting XSS.This issue affects baguetteBox.Js: from 0.0.0 before 2.0.4, from 3.0.0 before 3.0.1...

CVE-2025-3733 baguetteBox.js - Moderately critical - Cross Site Scripting - SA-CONTRIB-2025-034

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal baguetteBox.Js allows Cross-Site Scripting XSS.This issue affects baguetteBox.Js: from 0.0.0 before 2.0.4, from 3.0.0 before 3.0.1...