CVE-2025-47702

The Drupal oEmbed Providers module (versions 0.0.0 through 2.2.1 ) is vulnerable to Cross-Site Scripting (XSS) due to improper neutralization of input during web page generation. This issue stems from the module failing to sufficiently mark administrative permissions as restricted, potentially al...