Skip to content
CVE PROGRAM SOURCE RECORD3.5 Low

CVE-2025-12761

Simple multi step form - Moderately critical - Cross-site Scripting - SA-CONTRIB-2025-116

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
drupal

Description

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Simple multi step form allows Cross-Site Scripting (XSS).This issue affects Simple multi step form: from 0.0.0 before 2.0.0.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Drupal Simple multi step form

Default version status: unaffected

  • 0.0.0 to < 2.0.0affected

References