Unrated severityNVD Advisory· Published Jul 21, 2025· Updated Jul 22, 2025
Block Attributes - Moderately critical - Cross-site Scripting - SA-CONTRIB-2025-090
CVE-2025-7715
Description
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Block Attributes allows Cross-Site Scripting (XSS).This issue affects Block Attributes: from 0.0.0 before 1.1.0, from 2.0.0 before 2.0.1.
Affected products
2- Range: <1.1.0, >=2.0.0 <2.0.1
- Drupal/Block Attributesv5Range: 0.0.0
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1News mentions
0No linked articles in our index yet.