Civictheme Design System (Drupal) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2025-10-30. Vendor: Drupal.

CVEs of Civictheme Design System

• CVE-2025-12082 - CVSS 7.5 (high), 2025-10-30: Incorrect Authorization vulnerability in Drupal CivicTheme Design System allows Forceful Browsing.This issue affects CivicTheme Design System: from 0.0.0…
• CVE-2025-12083 - CVSS 6.1 (medium), 2025-10-30: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal CivicTheme Design System allows Cross-Site…