CVE Intelligence

Drupal CivicTheme Design System vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Drupal CivicTheme Design System: 2 record(s), with affected versions and fixes.

CVE-2025-12083 Medium · 6.1 CWE-79 Oct 29, 2025
CivicTheme Design System - Moderately critical - Cross-site Scripting - SA-CONTRIB-2025-113
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal CivicTheme Design System allows Cross-Site Scripting (XSS).This issue affects CivicTheme Design System: from 0.0.0 before 1.12.0.
CVE-2025-12082 High · 7.5 CWE-863 Oct 29, 2025
CivicTheme Design System - Moderately critical - Information disclosure - SA-CONTRIB-2025-112
Incorrect Authorization vulnerability in Drupal CivicTheme Design System allows Forceful Browsing.This issue affects CivicTheme Design System: from 0.0.0 before 1.12.0.