Drupal
Drupal core - Critical - Cross site scripting - SA-CORE-2025-001
SA-CORE-2025-001 Feb 19, 2025 Source: Vendor
Imported by the Drupal advisory catcher from https://www.drupal.org/sa-core-2025-001. 10 reporter(s), 2 fixer(s). Draft. Review before publishing.
Source of record
The credited names below are quoted verbatim from the vendor's own advisory:
https://www.drupal.org/sa-core-2025-001
Are you credited here?
Sign in and claim your line: it is yours immediately, no review queue.
The name the vendor printed stays next to your handle for anyone to check against the advisory above,
and any member who thinks a claim is wrong can refute it.
Credited
12 lines
Showing 1–12 of 12
CVE-2025-3057
BR2025-0000-008713
unclaimed
Drupal core - Critical - Cross site scripting - SA-CORE-2025-001
Credited as Arne (arkepp)
CVE-2025-3057
BR2025-0000-008714
unclaimed
Drupal core - Critical - Cross site scripting - SA-CORE-2025-001
Credited as bdanin
CVE-2025-3057
BR2025-0000-008715
unclaimed
Drupal core - Critical - Cross site scripting - SA-CORE-2025-001
Credited as Douglas Groene (dgroene)
CVE-2025-3057
BR2025-0000-008716
unclaimed
Drupal core - Critical - Cross site scripting - SA-CORE-2025-001
Credited as Dragos Dumitrescu (dragos-dumi)
CVE-2025-3057
BR2025-0000-008717
unclaimed
Drupal core - Critical - Cross site scripting - SA-CORE-2025-001
Credited as Flo Kosiol (flokosiol)
CVE-2025-3057
BR2025-0000-008718
unclaimed
Drupal core - Critical - Cross site scripting - SA-CORE-2025-001
Credited as Gerardo Cadau (juanramonperez)
CVE-2025-3057
BR2025-0000-008719
unclaimed
Drupal core - Critical - Cross site scripting - SA-CORE-2025-001
Credited as Justin Christoffersen (larsdesigns)
CVE-2025-3057
BR2025-0000-008720
unclaimed
Drupal core - Critical - Cross site scripting - SA-CORE-2025-001
Credited as nuwans
CVE-2025-3057
BR2025-0000-008721
unclaimed
Drupal core - Critical - Cross site scripting - SA-CORE-2025-001
Credited as Sven Decabooter (svendecabooter)
CVE-2025-3057
BR2025-0000-008722
unclaimed
Drupal core - Critical - Cross site scripting - SA-CORE-2025-001
Credited as Will Gunn (wgunn_e)
CVE-2025-3057
BR2025-0000-008723
unclaimed
Drupal core - Critical - Cross site scripting - SA-CORE-2025-001
Credited as catch (catch) of the Drupal Security Team
CVE-2025-3057
BR2025-0000-008724
unclaimed
Drupal core - Critical - Cross site scripting - SA-CORE-2025-001
Credited as Drew Webber (mcdruid) of the Drupal Security