PatchTheCVE: facetshttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2025-9550: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Fhttps://patchthecve.com/cve/CVE-2025-9550.htmlhttps://patchthecve.com/cve/CVE-2025-9550.htmlThu, 08 Oct 2026 13:10:00 +0000MEDIUM 6.1: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Facets allows Cross-Site Scripting (XSS).This issue affects Facets: from 0.0.0 before 2.0.10, from 3.0.0 before 3.0.1.CVE-2025-9549: Missing Authorization vulnerability in Drupal Facets allows Forceful Browsing.This issue affects Facets: from https://patchthecve.com/cve/CVE-2025-9549.htmlhttps://patchthecve.com/cve/CVE-2025-9549.htmlThu, 08 Oct 2026 13:10:00 +0000MEDIUM 6.5: Missing Authorization vulnerability in Drupal Facets allows Forceful Browsing.This issue affects Facets: from 0.0.0 before 2.0.10, from 3.0.0 before 3.0.1.CVE-2024-13283: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Fhttps://patchthecve.com/cve/CVE-2024-13283.htmlhttps://patchthecve.com/cve/CVE-2024-13283.htmlWed, 17 Jun 2026 07:01:40 +0000MEDIUM 6.1: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Facets allows Cross-Site Scripting (XSS).This issue affects Facets: from 0.0.0 before 2.0.9.