CVE-2024-13283

CVE-2024-13283 covers a Cross‑Site Scripting vulnerability in the Drupal Facets module caused by improper input neutralization during page generation. Affected: Facets versions 0.0.0 through 2.0.9. Impact: potential XSS (per CVE details and associated advisories). Remediation: upgrade to a versio...

CVE-2025-9550

CVE-2025-9550 : Drupal Facets has an improper neutralization of input during web page generation, allowing Cross-Site Scripting (XSS). Affected are Drupal Facets versions before 2.0.10 and before 3.0.1. Remediation is to upgrade to Facets 2.0.10+ or 3.0.1+. The CVSS 3.1 base score is 6.1 (MEDIUM)...

CVE-2025-9549

Drupal Facets is affected by a Missing Authorization vulnerability enabling forceful browsing in certain older versions. Affected ranges are Facets 0.0.0 through 2.0.9 and 3.0.0 through 3.0.0; the issue is fixed by upgrading to 2.0.10+ or 3.0.1+. No exploitation details are provided in the source...