Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: Salsa.digital Component: Civictheme Design System Clear all filters
TI-2025-11080 CVE-2025-12083 · GHSA-h72q-cq3w-h3wc

CivicTheme Design System - Moderately critical - Cross-site Scripting - SA-CONTRIB-2025-113

Priority LOW 27

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal CivicTheme Design System allows Cross-Site Scripting (XSS).This issue affects CivicTheme Design System: from 0.…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00202 Published 2025-10-29 Fixed in 1.12.0 CWE-79