Cross-Site Scripting Vulnerability in Drupal Admin LTE Theme
CVE-2025-3062

Currently unrated

Key Information:

Vendor
Drupal
Status
Drupal Admin Lte Theme
Vendor
CVE Published:
31 March 2025

Summary

A Cross-Site Scripting (XSS) vulnerability exists in the Drupal Admin LTE theme, potentially allowing attackers to inject malicious scripts. This could lead to unauthorized access to sensitive information, compromising user accounts, and exposing web applications to further exploits. It is imperative for users and administrators to apply necessary patches and updates to safeguard their systems against such vulnerabilities.

Affected Version(s)

Drupal Admin LTE theme *.*

References

https://www.drupal.org/sa-contrib-2025-010

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.