CVE-2025-14556
XSS in Drupal 7 Flag Module
Résumé
XSS in Drupal 7 Flag Module
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Drupal Flag allows Cross-Site Scripting (XSS).This issue affects Flag: from 7.X-3.0 through 7.X-3.9.
Références
- advisory d7es.tag1.com
- advisory github.com
- advisory nvd.nist.gov
- advisory herodevs.com
- web git.drupalcode.org
- web drupal.org