CVE-2025-3130

score

<0.1

cvss

5.4

epss

0.2%

published

2025-04-02

kev added

—

first seen

2026-10-21

Drupal Obfuscate versions before 2.0.1 contain a cross-site scripting caused by improper neutralization of input during web page generation, letting attackers execute malicious scripts stored on the server, exploit requires attacker to submit malicious input.