GHSA-h72q-cq3w-h3wc

Опубликовано: 30 окт. 2025

Источник: github

Github: Прошло ревью

CVSS3: 6.1

Описание

Drupal CivicTheme Design System allows Cross-Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal CivicTheme Design System allows Cross-Site Scripting (XSS). This issue affects CivicTheme Design System: from 0.0.0 before 1.12.0.

Ссылки

Пакеты

Наименование

drupal/civictheme

composer

Затронутые версииВерсия исправления

< 1.12.0

1.12.0

EPSS

Процентиль: 12%

0.00041

Низкий

6.1 Medium

CVSS3

CVE ID

CVE-2025-12083

Дефекты

CWE-79

Связанные уязвимости

CVE-2025-12083

CVSS3: 6.1

nvd

3 месяца назад

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal CivicTheme Design System allows Cross-Site Scripting (XSS).This issue affects CivicTheme Design System: from 0.0.0 before 1.12.0.

EPSS

Процентиль: 12%

0.00041

Низкий

6.1 Medium

CVSS3

CVE ID

CVE-2025-12083

Дефекты

CWE-79