Artificial Intelligence Project

3 CVEs vendor

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2025-13981 Jan 28, 20:16 PHP MEDIUM PATCH This Month

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal AI (Artificial Intelligence) allows Cross-Site Scripting (XSS).This issue affects AI (Artificial Intelligence): from 0.0.0 before 1.0.7, from 1.1.0 before 1.1.7, from 1.2.0 before 1.2.4. [CVSS 4.4 MEDIUM]

XSS Drupal AI / ML Artificial Intelligence Artificial Intelligence Project

NVD

CVSS 3.1

4.4

EPSS

0.0%

CVE-2025-31678 Mar 31, 22:15 PHP HIGH PATCH This Week

Missing Authorization vulnerability in Drupal AI (Artificial Intelligence) allows Forceful Browsing.0.0 before 1.0.3. Rated high severity (CVSS 8.2), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Drupal Artificial Intelligence Artificial Intelligence Project

NVD

CVSS 3.1

8.2

EPSS

0.4%

CVE-2025-31677 Mar 31, 22:15 PHP HIGH PATCH This Week

Cross-Site Request Forgery (CSRF) vulnerability in Drupal AI (Artificial Intelligence) allows Cross Site Request Forgery.0.0 before 1.0.2. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

CSRF Drupal Artificial Intelligence Artificial Intelligence Project

NVD

CVSS 3.1

8.8

EPSS

0.1%

CVE-2025-13981 PHP

EPSS 0% CVSS 4.4

MEDIUM PATCH This Month

XSS Drupal AI / ML +2

NVD

CVE-2025-31678 PHP

EPSS 0% CVSS 8.2

HIGH PATCH This Week

Authentication Bypass Drupal Artificial Intelligence +1

NVD

CVE-2025-31677 PHP

EPSS 0% CVSS 8.8

HIGH PATCH This Week

CSRF Drupal Artificial Intelligence +1

NVD