CVE-2025-13981
AI (Artificial Intelligence) - Moderately critical - Cross-Site Scripting - SA-CONTRIB-2025-119
Summary
AI (Artificial Intelligence) - Moderately critical - Cross-Site Scripting - SA-CONTRIB-2025-119
Original description
The description as published by the source.
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal AI (Artificial Intelligence) allows Cross-Site Scripting (XSS).This issue affects AI (Artificial Intelligence): from 0.0.0 before 1.0.7, from 1.1.0 before 1.1.7, from 1.2.0 before 1.2.4.
Affected packages
Packagist:https://packages.drupal.org/8
drupal/ai
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.7"}],"database_specific":{"constraint":"<1.0.7"}},{"type":"ECOSYSTEM","events":[{"introduced":"1.1.0"},{"fixed":"1.1.7"}],"database_specific":{"constraint":">=1.1.0 <1.1.7"}},{"type":"ECOSYSTEM","events":[{"introduced":"1.2.0"},{"fixed":"1.2.4"}],"database_specific":{"constraint":">=1.2.0 <1.2.4"}}]
References
- advisory github.com
- advisory nvd.nist.gov
- web drupal.org
- web git.drupalcode.org
- web drupal.org