CVE-2025-7715: Block Attributes - Moderately critical - Cross-site Scripting - SA-CONTRIB-2025-090
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Block Attributes allows Cross-Site Scripting (XSS).This issue affects Block Attributes: from 0.0.0 before 1.1.0, from 2.0.0 before 2.0.1.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-7715?
The severity of CVE-2025-7715 is classified as high due to its potential to allow cross-site scripting.
How can I fix CVE-2025-7715?
To fix CVE-2025-7715, upgrade to Block Attributes version 1.1.0 or later, or version 2.0.1 or later.
What is the impact of CVE-2025-7715?
CVE-2025-7715 can lead to unauthorized access and manipulation of user sessions through cross-site scripting.
Which versions of Block Attributes are affected by CVE-2025-7715?
CVE-2025-7715 affects Block Attributes versions prior to 1.1.0 and from 2.0.0 before 2.0.1.
Is user data at risk due to CVE-2025-7715?
Yes, user data is at risk due to the potential exploitation of cross-site scripting vulnerabilities in CVE-2025-7715.