IP-DB.com
Türkçe English Deutsch Español
Anmelden API-Schlüssel holen
6.1Mittel

CVE-2025-7715Block Attributes - Moderately critical - Cross-site Scripting - SA-CONTRIB-2025-090

Drupal Block Attributes Veröffentlicht: (vor 1 Jahr)

Beschreibung

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Block Attributes allows Cross-Site Scripting (XSS).This issue affects Block Attributes: from 0.0.0 before 1.1.0, from 2.0.0 before 2.0.1.

Schwachstellentyp (CWE): CWE-79

Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.

Betroffene Produkte und Versionen

HerstellerProduktVersionen
block attributes project block attributes 7.x-1.x-dev – < 8.x-1.1
Drupal Block Attributes 0.0.0 – < 1.1.0, 2.0.0 – < 2.0.1

Referenzen und Patches

CPE-Treffer (NVD) (2)
  • cpe:2.3:a:block_attributes_project:block_attributes:*:*:*:*:*:drupal:*:* ≥ 7.x-1.x-dev < 8.x-1.1
  • cpe:2.3:a:block_attributes_project:block_attributes:2.0.0:*:*:*:*:drupal:*:*