← CVE Intelligence

CVE-2025-3901

Bootstrap Site Alert - Moderately critical - Cross Site Scripting - SA-CONTRIB-2025-042 PUBLISHED

Description (CNA)

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Bootstrap Site Alert allows Cross-Site Scripting (XSS).This issue affects Bootstrap Site Alert: from 0.0.0 before 1.13.0, from 3.0.0 before 3.0.4.

Affected (CNA)

Vendor / productVersions
Drupal / Bootstrap Site Alertaffected 0.0.0 before 1.13.0; affected 3.0.0 before 3.0.4

CWE

CWE-79

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.