CVE-2025-31695

The Drupal Link field display mode formatter module (versions 0.0.0 before 1.6.0) is vulnerable to Cross-Site Scripting (XSS) due to improper input neutralization during web page generation. The root cause is the lack of measures to protect the structure of web pages, allowing a malicious actor t...