Executive brief
Drupal Core Potential Cross-Site Scripting (XSS) via Error Messages
Affected products
- Packagist drupal/core
Junglewise Threat Intelligence
CVE-2025-3057: Drupal Core Potential Cross-Site Scripting (XSS) via Error Messages
CVE-2025-3057 · Severity: low · CVSS 3.1 · Published 2025-04-01
Technologies: drupal/core (Packagist). Vendors: Packagist.