Security Vulnerabilities - CVEs Published In January 2025
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Browser Back Button allows Cross-Site Scripting (XSS).This issue affects Browser Back Button: from 1.0.0 before 2.0.2.
CVSS Score
3.8
EPSS Score
0.001
Published
2025-01-09
Improper Authentication vulnerability in Drupal Login Disable allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Login Disable: from 2.0.0 before 2.1.1.
CVSS Score
5.4
EPSS Score
0.001
Published
2025-01-09
Vulnerability in Drupal Git Utilities for Drupal.This issue affects Git Utilities for Drupal: *.*.
CVSS Score
6.5
EPSS Score
0.001
Published
2025-01-09
Vulnerability in Drupal Allow All File Extensions for file fields.This issue affects Allow All File Extensions for file fields: *.*.
CVSS Score
7.3
EPSS Score
0.001
Published
2025-01-09
Deserialization of Untrusted Data vulnerability in Drupal Node export allows Object Injection.This issue affects Node export: from 7.X-* before 7.X-3.3.
CVSS Score
6.6
EPSS Score
0.001
Published
2025-01-09
Deserialization of Untrusted Data vulnerability in Drupal Mailjet allows Object Injection.This issue affects Mailjet: from 0.0.0 before 4.0.1.
CVSS Score
6.6
EPSS Score
0.001
Published
2025-01-09
Deserialization of Untrusted Data vulnerability in Drupal Eloqua allows Object Injection.This issue affects Eloqua: from 7.X-* before 7.X-1.15.
CVSS Score
6.6
EPSS Score
0.004
Published
2025-01-09
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Tarte au Citron allows Cross-Site Scripting (XSS).This issue affects Tarte au Citron: from 2.0.0 before 2.0.5.
CVSS Score
4.8
EPSS Score
0.0
Published
2025-01-09
Vulnerability in Drupal Megamenu Framework.This issue affects Megamenu Framework: *.*.
CVSS Score
6.6
EPSS Score
0.001
Published
2025-01-09
Vulnerability in Drupal Print Anything.This issue affects Print Anything: *.*.
CVSS Score
6.6
EPSS Score
0.001
Published
2025-01-09