Vulnerabilities

TI-2025-12774 CVE-2025-13979 · GHSA-mwgm-j9q4-3cm5

Mini site - Moderately critical - Cross-Site Scripting - SA-CONTRIB-2025-117

LOW 24

Privilege Defined With Unsafe Actions vulnerability in Drupal Mini site allows Stored XSS.This issue affects Mini site: from 0.0.0 before 3.0.2.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00181 Published 2026-01-28 Fixed in 3.0.2 CWE-267

TI-2025-11080 CVE-2025-12083 · GHSA-h72q-cq3w-h3wc

CivicTheme Design System - Moderately critical - Cross-site Scripting - SA-CONTRIB-2025-113

LOW 27

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal CivicTheme Design System allows Cross-Site Scripting (XSS).This issue affects CivicTheme Design System: from 0.…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00202 Published 2025-10-29 Fixed in 1.12.0 CWE-79

TI-2025-11079 CVE-2025-12082 · GHSA-qxr9-f877-9842

CivicTheme Design System - Moderately critical - Information disclosure - SA-CONTRIB-2025-112

LOW 33

Incorrect Authorization vulnerability in Drupal CivicTheme Design System allows Forceful Browsing.This issue affects CivicTheme Design System: from 0.0.0 before 1.12.0.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00307 Published 2025-10-29 Fixed in 1.12.0 CWE-863

Vulnerabilities

Filters

Mini site - Moderately critical - Cross-Site Scripting - SA-CONTRIB-2025-117

CivicTheme Design System - Moderately critical - Cross-site Scripting - SA-CONTRIB-2025-113

CivicTheme Design System - Moderately critical - Information disclosure - SA-CONTRIB-2025-112