Skip to content
CVE PROGRAM SOURCE RECORD4.8 Medium

CVE-2025-14557

XSS in Drupal 7 Facebook Pixel Module

Description

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Drupal Facebook Pixel facebook_pixel allows Stored XSS.This issue affects Facebook Pixel: from 7.X-1.0 through 7.X-1.1.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Drupal Facebook Pixel

Default version status: unaffected

  • 7.x-1.0 to ≤ 7.x-1.1affected

References