XSS in Drupal Obfuscate

CVE-2025-3130

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Obfuscate allows Stored XSS.This issue affects Obfuscate: from 0.0.0 before 2.0.1.

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.003 (56.6th percentile) — read the EPSS interpretation.