Cross-Site Scripting Vulnerability in Drupal baguetteBox.Js
CVE-2025-3733

Currently unrated

Key Information:

Vendor

Drupal
Status
baguetteBox.Js
Vendor
CVE Published:
16 April 2025

What is CVE-2025-3733?

An input validation flaw has been identified in the Drupal baguetteBox.Js library, allowing malicious actors to execute Cross-Site Scripting (XSS) attacks. This vulnerability affects multiple versions of the baguetteBox.Js library, presenting a significant risk to web applications that utilize this component, especially those using versions prior to 2.0.4 and between 3.0.0 and 3.0.1. Proper sanitization measures are essential to protect against potential exploitation.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://www.drupal.org/sa-contrib-2025-034

Timeline

  • Vulnerability published

JSON
.