CVE-2025-47702

The Drupal oEmbed Providers module (versions 0.0.0 through 2.2.1 ) is vulnerable to Cross-Site Scripting (XSS) due to improper input neutralization during web page generation. The root cause is that the module fails to sufficiently mark its administrative permissions as restricted, potentially al...