Approved changes feed: RSS · Atom

cpe:2.3:a:drupal:baguettebox.js:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorDrupal (5a354f1f-83c2-5c0e-b1bc-3ae1f55812de)
ProductBaguettebox.Js (46043c78-4b32-578d-afd3-a2ea24e43888)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-3733 vulnerable 2026-06-08 07:23:09.732282 baguetteBox.js - Moderately critical - Cross Site Scripting - SA-CONTRIB-2025-034
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal baguetteBox.Js allows Cross-Site Scripting (XSS).This issue affects baguetteBox.Js: from 0.0.0 before 2.0.4, from 3.0.0 before 3.0.1.
Published: 2025-04-16T16:30:59.761Z
Updated: 2025-04-16T20:17:04.797Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.