CVE-2025-8675: AI SEO Link Advisor - Less critical - Server-side Request Forgery - SA-CONTRIB-2025-095

Severity: high (CVSS 8.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2025-08-15 · updated 2026-06-17
Weakness: CWE-918

Description

Server-Side Request Forgery (SSRF) vulnerability in Drupal AI SEO Link Advisor allows Server Side Request Forgery.This issue affects AI SEO Link Advisor: from 0.0.0 before 1.0.6.

Affected products

Drupal AI SEO Link Advisor: before 1.0.6 — fixed in 1.0.6

How to fix

Upgrade to a fixed version: Drupal AI SEO Link Advisor 1.0.6. Check the vendor advisory for mitigations.

References

https://www.drupal.org/sa-contrib-2025-095

Get alerted when CVE-2025-8675 or the next vulnerability affects your stack