Where
AND
-Infinity
0

composer/drupal/coreDrupal core - Moderately critical - Information disclosure - SA-CORE-2025-008

Risk 20
Severity
3.7
First published (updated )

Drupal DrupalXSS

Risk 13
Severity
2.1
First published (updated )

MediaFront MediaFrontXSS

Risk 13
Severity
2.1
First published (updated )

Florian Weber SpacesThe Spaces OG submodule in the Spaces module 6.x-3.x before 6.x-3.7 for Drupal does not properly del…

Risk 13
Severity
2.1
First published (updated )

Monster Menus Module Project Monster MenusThe Monster Menus module 7.x-1.x before 7.x-1.15 allows remote attackers to read arbitrary node comm…

Risk 15
Severity
2.6
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Drupalisme TinyboxXSS

Risk 13
Severity
2.1
First published (updated )

CurvyCorners CurvyCornersXSS

Risk 13
Severity
2.1
First published (updated )

Devsaran CompanyXSS

Risk 13
Severity
2.1
First published (updated )

Devsaran Clean ThemeXSS

Risk 13
Severity
2.1
First published (updated )

Devsaran CorporateXSS

Risk 13
Severity
2.1
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Mathijs Koenraadt Search Api SortsXSS

Risk 13
Severity
2.1
First published (updated )

Netgenius MultilinkInfoleak

Risk 18
Severity
3.5
First published (updated )

Simon Rycroft HashcashXSS

Risk 15
Severity
2.6
First published (updated )

Christian Johansson Restrict Node Page ViewThe Restrict node page view module 7.x-1.x before 7.x-1.2 for Drupal allows remote authenticated use…

Risk 18
Severity
3.5
First published (updated )

Roy Baxter Better RevisionsXSS

Risk 13
Severity
2.1
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Devsaran Elegant ThemeXSS

Risk 13
Severity
2.1
First published (updated )

Inclind Custom PubXSS

Risk 13
Severity
2.1
First published (updated )

Isaac Sukin ShortenXSS

Risk 13
Severity
2.1
First published (updated )

Nancy Wichmann AnnouncementsThe Announcements module 6.x-1.x before 6.x-1.5 for Drupal allows remote authenticated users with th…

Risk 18
Severity
3.5
First published (updated )

Lingotek LingotekXSS

Risk 18
Severity
3.5
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Commerceguys CommerceXSS

Risk 18
Severity
3.5
First published (updated )

Drupal DrupalAlgorithmic complexity vulnerability in the _filter_url function in the text filtering system (modul…

Risk 18
Severity
3.5
First published (updated )

63reasons SupercronXSS

Risk 18
Severity
3.5
First published (updated )

Nestor Mata Cuthbert Taxonomy NavigatorXSS

Risk 13
Severity
2.1
First published (updated )

Dmitry Loac TaxotouchXSS

Risk 13
Severity
2.1
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Marvil07 Vote Up DownXSS

Risk 18
Severity
3.5
First published (updated )

Alquimia ManagesiteXSS

Risk 13
Severity
2.1
First published (updated )

Wim Leers Hierarchical SelectXSS

Risk 13
Severity
2.1
First published (updated )

Collectivecolors Taxonomy View Integrator ModuleXSS

Risk 18
Severity
3.5
First published (updated )

Nathan Haug WebformXSS

Risk 13
Severity
2.1
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203