CVE-2025-31697
2 advisories.
Packagist/drupal/formatter_suite CVE-2025-31697: medium 6.1, EPSS 0.26%
Drupal Formatter Suite Vulnerable to Cross-Site Scripting (XSS) via Link Element Attributes
Action: Upgrade drupal/formatter_suite to 2.1.0 or later.
composer require drupal/formatter_suite:2.1.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.1.0 | - |
Fixed versions
| 2.1.0 |
Sources
- osv: GHSA-5r66-vgc7-2mm3
- https://nvd.nist.gov/vuln/detail/CVE-2025-31697
- https://git.drupalcode.org/project/formatter_suite
- https://git.drupalcode.org/project/formatter_suite/-/commit/58adb4168466b056e33fc4f356f43dd000e3765b
- https://www.drupal.org/sa-contrib-2025-026
CVE-2025-31697 · published · modified · JSON
Packagist/drupal/formatter_suite CVE-2025-31697: unknown, EPSS 0.26%
Formatter Suite provides a suite of field formatters to help present numbers, dates, times, text, links, entity references, files, and images. The module provides a custom formatter for link fields.
Action: Upgrade drupal/formatter_suite to 2.1.0 or later.
composer require drupal/formatter_suite:2.1.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.1.0 | - |
Fixed versions
| 2.1.0 |
Sources
CVE-2025-31697 · published · modified · JSON