Threats tagged 'drupal-contrib-2025-116'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Low	3.5	EPSS 0.2%	CVE-2025-12761Simple multistep · This module provides the ability to convert any entity form into a simple Low3.5EPSS 0.2%2025-11-05GCVE DatabaseCVE-2025-12761 The Simple multistep module for Drupal allows converting any entity form into a simple multi-step form. A cross-site scripting (XSS) vulnerability exists due to insufficient filtering of certain user-provided text. Exploitation requires the attacker to have the 'administer node form display' permission, limiting the attack surface. A fix is available in version 2.0.0. EPSS 0.2%Report on CVE-2025-12761 Vulnerability #drupal-contrib-2025-116 #packagist-https-packages-drupa	GCVE Database	2025-11-05

Page 1 of 1