Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: Facets Project Component: Facets Clear all filters
TI-2025-08746 CVE-2025-9550 · GHSA-5x6h-48h5-777v

Facets - Moderately critical - Cross Site Scripting - SA-CONTRIB-2025-100

Priority LOW 27

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Facets allows Cross-Site Scripting (XSS).This issue affects Facets: from 0.0.0 before 2.0.10, from 3.0.0 before…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00194 Published 2025-10-10 Fixed in 2.0.10, 3.0.1 CWE-79
TI-2024-12327 CVE-2024-13283 · GHSA-37wj-v394-2xvc

Facets - Critical - Cross Site Scripting - SA-CONTRIB-2024-047

Priority LOW 27

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Facets allows Cross-Site Scripting (XSS).This issue affects Facets: from 0.0.0 before 2.0.9.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00239 Published 2025-01-09 Fixed in 2.0.9 CWE-79