Thomas Seidl

A missing authorization issue exists in Drupal Facets, potentially allowing forceful browsing. The issue relates to insufficient access controls.

A flaw exists in Drupal Facets that allows for Cross-Site Scripting (XSS). This occurs due to improper neutralization of input during web page generation. The issue impacts the way data is handled, potentially allowing malicious scripts to be injected into web pages.

A Cross-Site Request Forgery (CSRF) issue affects the software, allowing unauthorized actions to be performed. This issue can be exploited to perform actions on behalf of another user without their knowledge or consent.