CVE-2025-3901

The CVE-2025-3901 entry concerns the Drupal Bootstrap Site Alert module, where improper input neutralization in web page generation enables Cross-Site Scripting (XSS). Affected versions are Drupal Bootstrap Site Alert 0.0.0 up to 1.12.0 and 3.0.0 up to 3.0.3. The root cause is unsafe handling of ...