CVE 3.5 LOW

Simple multi step form – Moderately critical – Cross-site Scripting – SA-CONTRIB-2025-116_CVE-2025-12761

3.5 / 10
LOW
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:N

Description

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Simple multi step form allows Cross-Site Scripting (XSS).This issue affects Simple multi step form: from 0.0.0 before 2.0.0.

Basic Information

ID CVE-2025-12761
Source drupal
Published Nov 18, 2025 at 16:56
Modified Nov 18, 2025 at 20:33

Affected Product

Vendor Drupal
Product Simple multi step form
Version 0.0.0
Affected Versions Drupal Simple multi step form 0.0.0

CWE Classification

References

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.