Syntax: kev:true severity:critical epss:>0.95 vendor:cisco patch:false
Filters
Severity
Exploitation
Data Source
Data Quality
Vendor
CWE — Weakness Type
Clear all
Top 20 matches Showing top matches — use filters or a more specific query to narrow
20 MEDIUM
CVE-2025-6677
MEDIUM CVSS 5.4
Find Similar
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Paragraphs table allows Cross-Site Scripting (XSS).This issue affects Paragraphs table: fro
paragraphs_table_project
NVD RRF 0.016
CVE-2025-3057
MEDIUM CVSS 6.1
Find Similar
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Drupal core allows Cross-Site Scripting (XSS).This issue affects Drupal core: from 8.0.0 be
drupal
NVD RRF 0.016
CVE-2024-12393
MEDIUM CVSS 5.4
Find Similar
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Drupal Core allows Cross-Site Scripting (XSS).This issue affects Drupal Core: from 8.8.0 be
drupal
NVD RRF 0.016
CVE-2024-55635
MEDIUM CVSS 6.1
Find Similar
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Drupal Core allows Cross-Site Scripting (XSS).This issue affects Drupal Core: from 7.0 befo
drupal
NVD RRF 0.016
CVE-2026-6367
MEDIUM CVSS 6.1
Find Similar
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Drupal core allows Cross-Site Scripting (XSS). This issue affects Drupal core: from 11.3.0
drupal
NVD RRF 0.015
CVE-2025-3902
MEDIUM CVSS 6.1
Find Similar
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Block Class allows Cross-Site Scripting (XSS).This issue affects Block Class: from 4.0.0 be
four_kitchens
NVD RRF 0.015
CVE-2025-31675
MEDIUM CVSS 5.4
Find Similar
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Drupal core allows Cross-Site Scripting (XSS).This issue affects Drupal core: from 8.0.0 be
drupal
NVD RRF 0.015
CVE-2026-6365
MEDIUM CVSS 6.1
Find Similar
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Drupal core allows Cross-Site Scripting (XSS). This issue affects Drupal core: from 8.0.0
drupal
NVD RRF 0.015
CVE-2026-6871
MEDIUM CVSS 6.1
Find Similar
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Obfuscate allows Cross-Site Scripting (XSS). This issue affects Obfuscate: from 0.0.0 befo
obfuscate_project
NVD RRF 0.014
CVE-2024-13283
MEDIUM CVSS 6.1
Find Similar
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Facets allows Cross-Site Scripting (XSS).This issue affects Facets: from 0.0.0 before 2.0.9
facets_project
NVD RRF 0.014
CVE-2026-3528
MEDIUM CVSS 6.1
Find Similar
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Calculation Fields allows Cross-Site Scripting (XSS).This issue affects Calculation Fields:
joaopaulocdev
NVD RRF 0.014
CVE-2025-7715
MEDIUM CVSS 6.1
Find Similar
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Block Attributes allows Cross-Site Scripting (XSS).This issue affects Block Attributes: fro
block_attributes_project
NVD RRF 0.014
CVE-2025-9550
MEDIUM CVSS 6.1
Find Similar
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Facets allows Cross-Site Scripting (XSS).This issue affects Facets: from 0.0.0 before 2.0.1
facets_project
NVD RRF 0.014
CVE-2025-31697
MEDIUM CVSS 6.1
Find Similar
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Formatter Suite allows Cross-Site Scripting (XSS).This issue affects Formatter Suite: from
formatter_suite_project
NVD RRF 0.014
CVE-2026-2348
MEDIUM CVSS 5.4
Find Similar
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Quick Edit allows Cross-Site Scripting (XSS).This issue affects Quick Edit: from 0.0.0 befo
wim-leers
NVD RRF 0.013
CVE-2024-13294
MEDIUM CVSS 5.4
Find Similar
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal POST File allows Cross-Site Scripting (XSS).This issue affects POST File: from 0.0.0 before
post_file_project
NVD RRF 0.013
CVE-2025-48923
MEDIUM CVSS 6.1
Find Similar
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Toc.Js allows Cross-Site Scripting (XSS).This issue affects Toc.Js: from 0.0.0 before 3.2.1
toc.js_project
NVD RRF 0.013
CVE-2025-3130
MEDIUM CVSS 5.4
Find Similar
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Obfuscate allows Stored XSS.This issue affects Obfuscate: from 0.0.0 before 2.0.1.
drupal
NVD RRF 0.013
CVE-2025-3901
MEDIUM CVSS 6.1
Find Similar
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Bootstrap Site Alert allows Cross-Site Scripting (XSS).This issue affects Bootstrap Site Al
bootstrap_site_alert_project
NVD RRF 0.013
CVE-2024-13247
MEDIUM CVSS 4.8
Find Similar
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Coffee allows Cross-Site Scripting (XSS).This issue affects Coffee: from 0.0.0 before 1.4.0
coffee_project
NVD RRF 0.013
Page 1+ Next →