Most recent entries from all

bdu:2025-01163

DRUPAL-CONTRIB-2024-047

Affected: Packagist:https://packages.drupal.org/8: drupal/facets

This module enables you to to easily create and manage faceted search interfaces.

The module doesn't sufficiently filter for malicious script leading to a reflected cross site scripting (XSS) vulnerability.

The vulnerability exists in the Facets Summary submodule. If you do not use that sub module your site is not vulnerable to this issue.

*Edited October 9, 2024: clarified that Facets Summary is where the vulnerability is located*

EUVD-2026-209928

fkie_cve-2024-13283

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Facets allows Cross-Site Scripting (XSS).This issue affects Facets: from 0.0.0 before 2.0.9.

GHSA-37wj-v394-2xvc

WID-SEC-W-2024-3127 — Drupal: Mehrere Schwachstellen

Ein Angreifer kann mehrere Schwachstellen in Drupal ausnutzen, um Sicherheitsmaßnahmen zu umgehen, einen Cross-Site-Scripting-Angriff durchzuführen oder vertrauliche Informationen offenzulegen.