CVE-2022-25271

score

<0.1

cvss

7.5

epss

1.3%

published

2022-02-16

kev added

—

first seen

2026-10-21

Drupal core's form API contains a vulnerability in certain contributed or custom modules' forms caused by improper input validation, letting attackers inject disallowed values or overwrite data, exploit requires attacker to submit malicious form data.