
Drupal Flag Cross-Site Scripting Vulnerability (CVE-2025-14556) — Medium Severity
A security flaw has been identified in the Drupal Flag module, a popular tool that allows website administrators to add “flags” to various content types like posts or comments. This vulnerability, known as Cross-Site Scripting (XSS), could potentially allow attackers…
