CVE-2025-12761

The Drupal Simple multi step form module (versions prior to 2.0.0 ) is vulnerable to Cross-Site Scripting (XSS) due to improper neutralization of user-provided input during web page generation. An attacker could inject malicious scripts into web pages viewed by other users. This vulnerability is ...