Drupal
Drupal core - Critical - Cross site scripting - SA-CORE-2025-001
SA-CORE-2025-001 Feb 19, 2025 Source: Vendor
Imported by the Drupal advisory catcher from https://www.drupal.org/sa-core-2025-001. 10 reporter(s), 2 fixer(s). Draft. Review before publishing.
Source of record
The credited names below are quoted verbatim from the vendor's own advisory:
https://www.drupal.org/sa-core-2025-001
Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.
Credited
12 lines
Showing 1–12 of 12
CVE-2025-3057
BR2025-0000-008713
unclaimed
Drupal core - Critical - Cross site scripting - SA-CORE-2025-001
Credited as Arne (arkepp)
CVE-2025-3057
BR2025-0000-008714
unclaimed
Drupal core - Critical - Cross site scripting - SA-CORE-2025-001
Credited as bdanin
CVE-2025-3057
BR2025-0000-008715
unclaimed
Drupal core - Critical - Cross site scripting - SA-CORE-2025-001
Credited as Douglas Groene (dgroene)
CVE-2025-3057
BR2025-0000-008716
unclaimed
Drupal core - Critical - Cross site scripting - SA-CORE-2025-001
Credited as Dragos Dumitrescu (dragos-dumi)
CVE-2025-3057
BR2025-0000-008717
unclaimed
Drupal core - Critical - Cross site scripting - SA-CORE-2025-001
Credited as Flo Kosiol (flokosiol)
CVE-2025-3057
BR2025-0000-008718
unclaimed
Drupal core - Critical - Cross site scripting - SA-CORE-2025-001
Credited as Gerardo Cadau (juanramonperez)
CVE-2025-3057
BR2025-0000-008719
unclaimed
Drupal core - Critical - Cross site scripting - SA-CORE-2025-001
Credited as Justin Christoffersen (larsdesigns)
CVE-2025-3057
BR2025-0000-008720
unclaimed
Drupal core - Critical - Cross site scripting - SA-CORE-2025-001
Credited as nuwans
CVE-2025-3057
BR2025-0000-008721
unclaimed
Drupal core - Critical - Cross site scripting - SA-CORE-2025-001
Credited as Sven Decabooter (svendecabooter)
CVE-2025-3057
BR2025-0000-008722
unclaimed
Drupal core - Critical - Cross site scripting - SA-CORE-2025-001
Credited as Will Gunn (wgunn_e)
CVE-2025-3057
BR2025-0000-008723
unclaimed
Drupal core - Critical - Cross site scripting - SA-CORE-2025-001
Credited as catch (catch) of the Drupal Security Team
CVE-2025-3057
BR2025-0000-008724
unclaimed
Drupal core - Critical - Cross site scripting - SA-CORE-2025-001
Credited as Drew Webber (mcdruid) of the Drupal Security