{"id":"drupal-security-51f69b037f52","seq":2019,"kind":"advisory","title":"Drupal core - Moderately critical - Defacement - SA-CORE-2025-007","url":"https://www.drupal.org/sa-core-2025-007","permalink":"https://vulnpulse.app/items/drupal-security-51f69b037f52","summary":"Project: Drupal core Project machine name: drupal Date: 2025-November-12 Security risk: Moderately critical 10 ∕ 25 AC:Basic/A:None/CI:None/II:None/E:Theoretical/TD:All Vulnerability: Defacement Affected versions: >= 8.0.0 < 10.4.9 || >= 10.5.0 < 10.5.6 || >= 11.0.0 < 11.1.9 || >= 11.2.0 < 11.2.8 CVE IDs: CVE-2025-13082 Description: By generating and tricking a user into visiting a malicious URL, an attacker can perform site defacement. The defacement is not stored and is only present when the URL has been crafted for that purpose. Only the defacement is present, so no other site content (suc…","severity":"critical","techs":["drupal","php"],"cves":["CVE-2025-13082"],"tags":["security"],"source":{"id":"drupal-security","name":"Drupal Security Advisories"},"published_at":"2025-11-12T20:16:21.000Z","fetched_at":"2026-10-21T16:17:45.699Z"}