CVE-2025-31695

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal Link field display mode formatter allows Cross-Site Scripting XSS.This issue affects Link field display mode formatter: from 0.0.0 before 1.6.0...

CVE-2025-31695

The Drupal Link field display mode formatter module (versions 0.0.0 before 1.6.0) is vulnerable to Cross-Site Scripting (XSS) due to improper input neutralization during web page generation. The root cause is the lack of measures to protect the structure of web pages, allowing a malicious actor t...