Skip to content
OpenAdvisories
Medium · 5.4 CVE-2025-13979 DRUPAL-CONTRIB-2025-117EUVD-2025-206442GHSA-mwgm-j9q4-3cm5

Mini site - Moderately critical - Cross-Site Scripting - SA-CONTRIB-2025-117

Published Jan 28, 2026 · Updated Jan 29, 2026 · Assigned by drupal

Vendor: Drupal Product: Mini site Package: drupal/minisite Ecosystem: Packagist

Description

Privilege Defined With Unsafe Actions vulnerability in Drupal Mini site allows Stored XSS.This issue affects Mini site: from 0.0.0 before 3.0.2.

Affected products

VendorProductAffectedFixed
Drupal Mini site 0.0.0 – < 3.0.2 3.0.2

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist drupal/minisite < 3.0.2 3.0.2 DRUPAL-CONTRIB-2025-117

Advisories 1

References