Joseph Zhao

#10087of 60,399
31.5Total CVSS
Vulnerabilities · 5
Medium
4
High
1
PT-2026-33240
2026-04-15
6.4
CVE-2026-6365
Drupal
Drupal
Drupal core's jQuery integration for AJAX modal dialog boxes does not sufficiently sanitize certain options, which can lead to cross-site scripting (XSS), a flaw where malicious scripts are injected into trusted websites.
PT-2025-13839
2025-03-19
5.4
CVE-2025-31675
Drupal
Drupal
The issue affects Drupal core, allowing Cross-Site Scripting (XSS) due to improper neutralization of input during web page generation.
PT-2025-13865
2025-03-19
7.5
CVE-2025-31695
Drupal
Drupal Link Field Display Mode Formatter
The issue is related to an Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting (XSS), in the Drupal Link field display mode formatter. This allows for Cross-Site Scripting (XSS) attacks.
PT-2025-13866
2025-03-19
6.1
CVE-2025-31696
Unknown
Rapidoc Oas Field Formatter
The issue affects the RapiDoc OAS Field Formatter, allowing Cross-Site Scripting (XSS) due to improper neutralization of input during web page generation.
PT-2025-13867
2025-03-19
6.1
CVE-2025-31697
Drupal
Drupal Formatter Suite
The issue is related to improper neutralization of input during web page generation, which allows Cross-Site Scripting (XSS). This can lead to the execution of malicious scripts on the client-side.