CVE-2025-13979: Mini site - Moderately critical - Cross-Site Scripting - SA-CONTRIB-2025-117
Published Jan 28, 2026
·Updated
Privilege Defined With Unsafe Actions vulnerability in Drupal Mini site allows Stored XSS.This issue affects Mini site: from 0.0.0 before 3.0.2.
Affected Software
2 affected components
Drupal Mini site<3.0.2
Salsa.digital Mini Site Drupal<3.0.2
Event History
Jan 28, 2026
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
DescriptionWeakness
Data Sourced
via NVD·08:16 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-13979?
CVE-2025-13979 is considered moderately critical due to its potential for Stored Cross-Site Scripting (XSS) attacks.
2
How do I fix CVE-2025-13979?
To fix CVE-2025-13979, update the Drupal Mini site to version 3.0.2 or later.
3
What kind of vulnerability is CVE-2025-13979?
CVE-2025-13979 is a Cross-Site Scripting (XSS) vulnerability that allows malicious scripts to be stored and executed on the affected site.
4
Which versions of Drupal Mini site are affected by CVE-2025-13979?
CVE-2025-13979 affects all versions of Drupal Mini site below 3.0.2.
5
Does CVE-2025-13979 affect any other products besides Drupal Mini site?
CVE-2025-13979 is specific to the Drupal Mini site and does not affect other products.