CVE-2025-3130

The Drupal Obfuscate module (versions before 2.0.1 ) is vulnerable to Stored Cross-Site Scripting (XSS) due to improper neutralization of input during web page generation. The root cause is the module's failure to sufficiently sanitize input when ROT13 encoding is utilized. Exploitation requires ...