CVE-2025-3901

CVE-2025-3901: Bootstrap Site Alert - Moderately critical - Cross Site Scripting - SA-CONTRIB-2025-042

Vendor Drupal
Product Bootstrap Site Alert
Weakness CWE-79 · XSS
Published April 23, 2025
Last update April 23, 2025
View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Bootstrap Site Alert allows Cross-Site Scripting (XSS).This issue affects Bootstrap Site Alert: from 0.0.0 before 1.13.0, from 3.0.0 before 3.0.4.

Key dates

02Disclosure timeline

April 23, 2025 CVE published
April 23, 2025 Record updated

Related vulnerabilities

04Related CVE

CVE-2025-31567 WordPress Themesflat Addons For Elementor plugin <= 2.3.1 - Cross Site Scripting (XSS) vulnerability CVE-2024-32528 WordPress WP Dynamic Keywords Injector plugin <= 2.3.18 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2025-1196 code-projects Real Estate Property Management System search.php cross site scripting CVE-2026-48224 Open ISES Tickets < 3.44.2 Reflected XSS via ics214.php frm_add_str Parameter CVE-2024-23884 Cross-Site Scripting (XSS) vulnerability in Cups Easy