CVE-2025-3902

The Drupal Block Class module (version 4.0.0 ) is vulnerable to Cross-Site Scripting (XSS) due to the improper neutralization of input during web page generation. Specifically, the module fails to sufficiently sanitize custom attribute input , which can allow an attacker to inject malicious JavaS...