CVE-2025-3057

Drupal core - Critical - Cross site scripting - SA-CORE-2025-001

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Drupal core allows Cross-Site Scripting (XSS).This issue affects Drupal core: from 8.0.0 before 10.3.13, from 10.4.0 before 10.4.3, from 11.0.0 before 11.0.12, from 11.1.0 before 11.1.3.

We have discovered 104,693 live websites that are affected by CVE-2025-3057.

Run a Free Instant Scan



Affected Software

Product  Drupal
Category Content Management System
Vulnerable Domains104,693 live websites (51% of Drupal install base)
Vulnerable Versions
  • from 8 through 10.3.13
  • from 10.4 through 10.4.3
  • from 11 through 11.0.12
  • from 11.1 through 11.1.3
Vulnerable Versions Count261 versions ( 77% of all versions)


Common Weakness Enumeration

CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')



Details

  • Published - Mar 31, 2025
  • Updated - Apr 1, 2025

Credits

  • Arne (arkepp) (finder)
  • bdanin (finder)
  • Douglas Groene (dgroene) (finder)
  • Dragos Dumitrescu (dragos-dumi) (finder)
  • Flo Kosiol (flokosiol) (finder)
  • Gerardo Cadau (juanramonperez) (finder)
  • Justin Christoffersen (larsdesigns) (finder)
  • nuwans (finder)
  • Sven Decabooter (svendecabooter) (finder)
  • Will Gunn (wgunn_e) (finder)
  • catch (catch) (remediation developer)
  • Drew Webber (mcdruid) (remediation developer)

Website Distribution by Country

Number of websites using CVE-2025-3057
United States36,924 websites


Germany9,999 websites
France8,074 websites
Belgium5,131 websites
GB4,002 websites
Netherlands3,586 websites
Russia3,305 websites
Canada2,851 websites
Italy2,611 websites
Spain2,381 websites

Website Distribution by TLD

Number of websites using CVE-2025-3057
.com27,552 websites
.org9,989 websites
.de6,485 websites
.edu6,447 websites
.be5,115 websites
.fr4,510 websites
.nl3,229 websites
.ru2,622 websites
.ca2,096 websites
.it2,026 websites

Vulnerable Versions

Vulnerable versions are highlighted in red

Websites affected by CVE-2025-3057

Top websites that are affected by CVE-2025-3057. Please click on the "Contact us" link to get more information.
DomainCountryRankContacts
***.**.uk GB***
*********.com United States***
***.gov United States***
*******.gov United States*,***
***.gov United States*,***
***.gov United States*,***
******.com United States*,***
*******.com United States*,***
***.org United States*,***
***.*******.edu United States*,***
See full domain list

FAQ

CVE-2025-3057 is Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Drupal
A total of 104,693 websites have been identified as vulnerable to CVE-2025-3057, based on global website indexing conducted by WebTechSurvey.
The Drupal is affected by the CVE-2025-3057 vulnerability.
Drupal versions up to 11.1.3 are vulnerable to CVE-2025-3057.
CVE-2025-3057 is resolved in version 11.1.3 of Drupal.