CVE-2024-13283

The Drupal Facets module is vulnerable to a reflected Cross-Site Scripting (XSS) issue due to improper input neutralization during web page generation. This vulnerability specifically exists in the Facets Summary submodule ; sites not using this specific submodule are not affected. This issue imp...

CVE-2025-9549

The Drupal Facets module is vulnerable to a Missing Authorization issue, which may allow Forceful Browsing and information disclosure. The root cause is that the module does not sufficiently check access to entities when they are displayed as facets. This specifically affects Facets versions 0.0....

CVE-2025-9550

The Drupal Facets module is vulnerable to Cross-Site Scripting (XSS) due to improper neutralization of user-provided text during web page generation. This flaw allows an attacker to inject malicious scripts into web pages. The vulnerability affects versions 0.0.0 through 2.0.10 and 3.0.0 through ...