Vulnerability advisory
BIT-drupal-2025-31675
Drupal core - Moderately critical - Cross Site Scripting - SA-CORE-2025-004
Also known as CVE-2025-31675DRUPAL-CORE-2025-004GHSA-m4wj-hhwj-47qp
Severity
Severity not reported.
Affected versions
drupal Bitnami
| Affected | Fixed in |
|---|---|
8.0.0 to before 10.4.5 | 10.4.5 |
11.0.0 to before 11.1.5 | 11.1.5 |
Severity for this package
| |
Description
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Drupal core allows Cross-Site Scripting (XSS).This issue affects Drupal core: from 8.0.0 before 10.3.14, from 10.4.0 before 10.4.5, from 11.0.0 before 11.0.13, from 11.1.0 before 11.1.5. It also affects the Drupal 7 module from versions 7.x-1.0 through 7.x-1.12.