Salsa.digital vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Salsa.digital products: 3 record(s), with severity, exploitation and fixes.

Civictheme Design System 2 Mini Site 1

Exploited only (KEV) →

CVE-2025-13979 Medium · 5.4 CWE-79 Jan 28, 2026

Mini site - Moderately critical - Cross-Site Scripting - SA-CONTRIB-2025-117

Privilege Defined With Unsafe Actions vulnerability in Drupal Mini site allows Stored XSS.This issue affects Mini site: from 0.0.0 before 3.0.2.

CVE-2025-12083 Medium · 6.1 CWE-79 Oct 29, 2025

CivicTheme Design System - Moderately critical - Cross-site Scripting - SA-CONTRIB-2025-113

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal CivicTheme Design System allows Cross-Site Scripting (XSS).This issue affects CivicTheme Design System: from 0.0.0 before 1.12.0.

CVE-2025-12082 High · 7.5 CWE-863 Oct 29, 2025

CivicTheme Design System - Moderately critical - Information disclosure - SA-CONTRIB-2025-112

Incorrect Authorization vulnerability in Drupal CivicTheme Design System allows Forceful Browsing.This issue affects CivicTheme Design System: from 0.0.0 before 1.12.0.