PatchTheCVE: salsa.digitalhttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2025-13979: Privilege Defined With Unsafe Actions vulnerability in Drupal Mini site allows Stored XSS.This issue affects Mhttps://patchthecve.com/cve/CVE-2025-13979.htmlhttps://patchthecve.com/cve/CVE-2025-13979.htmlWed, 17 Jun 2026 08:35:06 +0000MEDIUM 5.4: Privilege Defined With Unsafe Actions vulnerability in Drupal Mini site allows Stored XSS.This issue affects Mini site: from 0.0.0 before 3.0.2.CVE-2025-12083: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Chttps://patchthecve.com/cve/CVE-2025-12083.htmlhttps://patchthecve.com/cve/CVE-2025-12083.htmlThu, 08 Oct 2026 10:10:00 +0000MEDIUM 6.1: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal CivicTheme Design System allows Cross-Site Scripting (XSS).This issue affects CivicTheme Design System: from 0.0.0 before 1.12.0.CVE-2025-12082: Incorrect Authorization vulnerability in Drupal CivicTheme Design System allows Forceful Browsing.This issue ahttps://patchthecve.com/cve/CVE-2025-12082.htmlhttps://patchthecve.com/cve/CVE-2025-12082.htmlThu, 08 Oct 2026 10:10:00 +0000HIGH 7.5: Incorrect Authorization vulnerability in Drupal CivicTheme Design System allows Forceful Browsing.This issue affects CivicTheme Design System: from 0.0.0 before 1.12.0.