Skip to content
OpenAdvisories
Medium · 6.1 CVE-2025-31696 DRUPAL-CONTRIB-2025-025EUVD-2025-9022GHSA-86h4-w859-3hhv

RapiDoc OAS Field Formatter - Moderately critical - Cross site scripting - SA-CONTRIB-2025-025

Published Mar 31, 2025 · Updated Apr 29, 2025 · Assigned by drupal

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal RapiDoc OAS Field Formatter allows Cross-Site Scripting (XSS).This issue affects RapiDoc OAS Field Formatter: from 0.0.0 before 1.0.1.

Affected products

VendorProductAffectedFixed
Drupal RapiDoc OAS Field Formatter 0.0.0 – < 1.0.1 1.0.1

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist drupal/rapidoc_elements_field_formatter < 1.0.1 1.0.1 DRUPAL-CONTRIB-2025-025

References