Cross-Site Scripting Vulnerability in Drupal Facets
CVE-2025-9550
Currently unrated
What is CVE-2025-9550?
The Drupal Facets module is vulnerable to Cross-Site Scripting (XSS) due to improper handling of input during webpage generation. Attackers could exploit this vulnerability to inject malicious scripts, potentially compromising user sessions or redirecting users to malicious sites. This affects all versions prior to 2.0.10 and any range from 3.0.0 before 3.0.1, emphasizing the importance of updating the module promptly to enhance security.
Affected Version(s)
Facets 0.0.0 < 2.0.10
Facets 3.0.0 < 3.0.1