https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T22:15:14.430437+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/drupal-contrib-2025-042 DRUPAL-CONTRIB-2025-042 2026-10-04T22:15:14.491958+00:00

Affected: Packagist:https://packages.drupal.org/8: drupal/bootstrap_site_alert

This module enables you to put a site wide bootstrap themed alert message on the top of every page.

The module doesn't sufficiently filter text input when leading to a possible XSS attacks.

This vulnerability is mitigated by the fact that an attacker must have a role with the permission "administer bootstrap site alerts".

 https://cve.radiocsirt.org/vuln/euvd-2026-234295 EUVD-2026-234295 2026-10-04T22:15:14.492014+00:00 EUVD-2026-234295 https://cve.radiocsirt.org/vuln/fkie_cve-2025-3901 fkie_cve-2025-3901 2026-10-04T22:15:14.492030+00:00

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Bootstrap Site Alert allows Cross-Site Scripting (XSS).This issue affects Bootstrap Site Alert: from 0.0.0 before 1.13.0, from 3.0.0 before 3.0.4.

 https://cve.radiocsirt.org/vuln/ghsa-777m-jvh5-prpj GHSA-777m-jvh5-prpj 2026-10-04T22:15:14.492053+00:00

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Bootstrap Site Alert allows Cross-Site Scripting (XSS).This issue affects Bootstrap Site Alert: from 0.0.0 before 1.13.0, from 3.0.0 before 3.0.4.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0881 WID-SEC-W-2025-0881 — Drupal Extensions: Mehrere Schwachstellen 2026-10-04T22:15:14.492068+00:00

Ein Angreifer kann mehrere Schwachstellen in verschiedenen Drupal Extensions ausnutzen, um einen Cross-Site Scripting- oder CSRF-Angriff durchzuführen oder weitere nicht spezifizierte Angriffe durchzuführen.