Moderate Cross-Site Scripting Vulnerability Discovered in Drupal Core

What changed

A new vulnerability has been reported in Drupal core, classified as moderately critical. This vulnerability, identified as CVE-2025-31675, enables cross-site scripting (XSS) attacks, which could be exploited by malicious actors to execute arbitrary scripts in the context of a user's session.

The issue is documented in the security advisory SA-CORE-2025-004, highlighting the importance of addressing this flaw promptly to protect against potential exploitation.

Who is affected

The vulnerability affects users of Drupal core, particularly those who have not yet implemented the latest security patches. Organizations utilizing Drupal for their web applications should be particularly vigilant.

The following groups are notably impacted:

• Drupal users who have not updated to the latest version.
• Web developers relying on Drupal for content management.
• Organizations that host public-facing websites using Drupal.
• Any third-party applications that integrate with Drupal.

What to do

To mitigate the risks associated with this vulnerability, it is crucial for affected users to take immediate action. Updating to the latest version of Drupal core is highly recommended to ensure protection against potential XSS attacks.

Additionally, organizations should review their security protocols and consider implementing additional safeguards to enhance their overall security posture.