Skip to content
OpenAdvisories
Medium · 5.4 CVE-2025-6677 DRUPAL-CONTRIB-2025-084EUVD-2025-19178GHSA-hcm9-m8h9-9g8p

Paragraphs table - Moderately critical - Cross Site Scripting - SA-CONTRIB-2025-084

Published Jun 26, 2025 · Updated Jun 26, 2025 · Assigned by drupal

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Paragraphs table allows Cross-Site Scripting (XSS).This issue affects Paragraphs table: from 2.0.0 before 2.0.5.

Affected products

VendorProductAffectedFixed
Drupal Paragraphs table 2.0.0 – < 2.0.5 2.0.5

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist drupal/paragraphs_table >= 2.0.0, < 2.0.5 2.0.5 DRUPAL-CONTRIB-2025-084

Advisories 1

References