Drupal
Drupal core - Moderately critical - Cross Site Scripting - SA-CORE-2025-004
SA-CORE-2025-004 Mar 19, 2025 Source: Vendor
Imported by the Drupal advisory catcher from https://www.drupal.org/sa-core-2025-004. 1 reporter(s), 14 fixer(s). Draft. Review before publishing.
Source of record
The credited names below are quoted verbatim from the vendor's own advisory:
https://www.drupal.org/sa-core-2025-004
Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.
Credited
14 lines
Showing 1–14 of 14
CVE-2025-31675
BR2025-0000-008689
unclaimed
Drupal core - Moderately critical - Cross Site Scripting - SA-CORE-2025-004
Credited as Samuel Mortenson (samuel.mortenson)
CVE-2025-31675
BR2025-0000-008690
unclaimed
Drupal core - Moderately critical - Cross Site Scripting - SA-CORE-2025-004
Credited as Anna Kalata (akalata), provisional member of the Drupal Security Team
CVE-2025-31675
BR2025-0000-008691
unclaimed
Drupal core - Moderately critical - Cross Site Scripting - SA-CORE-2025-004
Credited as Alex Pott (alexpott) of the Drupal Security Team
CVE-2025-31675
BR2025-0000-008692
unclaimed
Drupal core - Moderately critical - Cross Site Scripting - SA-CORE-2025-004
Credited as Benji Fisher (benjifisher) of the Drupal Security Team
CVE-2025-31675
BR2025-0000-008693
unclaimed
Drupal core - Moderately critical - Cross Site Scripting - SA-CORE-2025-004
Credited as Bram Driesen (bramdriesen), provisional member of the Drupal Security Team
CVE-2025-31675
BR2025-0000-008694
unclaimed
Drupal core - Moderately critical - Cross Site Scripting - SA-CORE-2025-004
Credited as catch (catch) of the Drupal Security Team
CVE-2025-31675
BR2025-0000-008695
unclaimed
Drupal core - Moderately critical - Cross Site Scripting - SA-CORE-2025-004
Credited as Alex Bronstein (effulgentsia) of the Drupal Security Team
CVE-2025-31675
BR2025-0000-008696
unclaimed
Drupal core - Moderately critical - Cross Site Scripting - SA-CORE-2025-004
Credited as Jen Lampton (jenlampton), provisional member of the Drupal Security Team
CVE-2025-31675
BR2025-0000-008697
unclaimed
Drupal core - Moderately critical - Cross Site Scripting - SA-CORE-2025-004
Credited as Lee Rowlands (larowlan) of the Drupal Security Team
CVE-2025-31675
BR2025-0000-008698
unclaimed
Drupal core - Moderately critical - Cross Site Scripting - SA-CORE-2025-004
Credited as Dave Long (longwave) of the Drupal Security Team
CVE-2025-31675
BR2025-0000-008699
unclaimed
Drupal core - Moderately critical - Cross Site Scripting - SA-CORE-2025-004
Credited as Drew Webber (mcdruid) of the Drupal Security Team
CVE-2025-31675
BR2025-0000-008700
unclaimed
Drupal core - Moderately critical - Cross Site Scripting - SA-CORE-2025-004
Credited as Joseph Zhao (pandaski), provisional member of the Drupal Security Team
CVE-2025-31675
BR2025-0000-008701
unclaimed
Drupal core - Moderately critical - Cross Site Scripting - SA-CORE-2025-004
Credited as Adam G-H (phenaproxima)
CVE-2025-31675
BR2025-0000-008702
unclaimed
Drupal core - Moderately critical - Cross Site Scripting - SA-CORE-2025-004
Credited as Jess (xjm) of the Drupal Security Team