Filtered by vendor Drupal Subscriptions
Filtered by product Next.js Subscriptions
Total 1 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2025-13984 1 Drupal 1 Next.js 2026-01-29 6.1 Medium
Permissive Cross-domain Security Policy with Untrusted Domains vulnerability in Drupal Next.Js allows Cross-Site Scripting (XSS).This issue affects Next.Js: from 0.0.0 before 1.6.4, from 2.0.0 before 2.0.1.