Read the docs

Facets Project

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Facets Project records in CISA KEV

No Facets Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Facets 3 records LOW

Records

3 records in Facets · all components

TI-2025-08746 CVE-2025-9550 · GHSA-5x6h-48h5-777v

Facets - Moderately critical - Cross Site Scripting - SA-CONTRIB-2025-100

Priority LOW 27

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Facets allows Cross-Site Scripting (XSS).This issue affects Facets: from 0.0.0 before 2.0.10, from 3.0.0 before…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00194 Published 2025-10-10 Fixed in 2.0.10, 3.0.1 CWE-79
TI-2024-12327 CVE-2024-13283 · GHSA-37wj-v394-2xvc

Facets - Critical - Cross Site Scripting - SA-CONTRIB-2024-047

Priority LOW 27

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Facets allows Cross-Site Scripting (XSS).This issue affects Facets: from 0.0.0 before 2.0.9.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00239 Published 2025-01-09 Fixed in 2.0.9 CWE-79
Open these records in search →