CVE-2025-31675 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Drupal core allows Cross-Site Scripting (XSS).This…
Medium CVSS: 5.4

CVE-2025-31675

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Drupal core allows Cross-Site Scripting (XSS).This issue affects Drupal core: from 8.0.0 before 10.3.14, from 10.4.0 before 10.4.5, from 11.0.0 before 11.0.13, from 11.1.0 before 11.1.5. It also affects the Drupal 7 module from versions 7.x-1.0 through 7.x-1.12.
Vendor
Drupal
Product
Drupal
CWE
CWE-79
Yayın Tarihi
2025-03-31 22:15:20
Güncelleme
2026-04-02 23:17:04
Source Identifier
mlhess@drupal.org
KEV Date Added
-

Kategoriler

CWE-79 Drupal MEDIUM Drupal 2025

Referanslar

https://d7es.tag1.com/security-advisories/link-moderately-critical-cross-site-scripting-sa-core-2025-004 https://www.drupal.org/sa-core-2025-004 https://www.herodevs.com/vulnerability-directory/cve-2025-31675