CVE-2025-13979
Mini site - Moderately critical - Cross-Site Scripting - SA-CONTRIB-2025-117
Résumé
Mini site - Moderately critical - Cross-Site Scripting - SA-CONTRIB-2025-117
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Privilege Defined With Unsafe Actions vulnerability in Drupal Mini site allows Stored XSS.This issue affects Mini site: from 0.0.0 before 3.0.2.
Paquets affectés
Packagist:https://packages.drupal.org/8
drupal/minisite
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.2"}],"database_specific":{"constraint":"<3.0.2"}}]
Références
- advisory github.com
- advisory nvd.nist.gov
- web drupal.org
- web git.drupalcode.org
- web drupal.org