Skip to content
OpenAdvisories
Medium · 6.1 CVE-2025-31679 DRUPAL-CONTRIB-2025-007EUVD-2025-9032GHSA-rhxm-r44m-4325

Ignition Error Pages - Critical - Cross Site Scripting - SA-CONTRIB-2025-007

Published Mar 31, 2025 · Updated Apr 29, 2025 · Assigned by drupal

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Ignition Error Pages allows Cross-Site Scripting (XSS).This issue affects Ignition Error Pages: from 0.0.0 before 1.0.4.

Affected products

VendorProductAffectedFixed
Drupal Ignition Error Pages 0.0.0 – < 1.0.4 1.0.4

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist drupal/ignition < 1.0.4 1.0.4 DRUPAL-CONTRIB-2025-007

References