https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T19:39:53.369272+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2025-00385 bdu:2025-00385 2026-10-04T19:39:53.372938+00:00 bdu:2025-00385 https://cve.radiocsirt.org/vuln/drupal-contrib-2024-011 DRUPAL-CONTRIB-2024-011 2026-10-04T19:39:53.372970+00:00

Affected: Packagist:https://packages.drupal.org/8: drupal/coffee

The Coffee module helps you to navigate through the Drupal admin menus faster with a shortcut popup.

The module doesn't sufficiently escape menu names when displaying them in the popup, thereby exposing a XSS vulnerability.

This vulnerability is mitigated by the fact that an attacker must have a role with the permission "Administer menus and menu links".

 https://cve.radiocsirt.org/vuln/euvd-2026-209916 EUVD-2026-209916 2026-10-04T19:39:53.373004+00:00 EUVD-2026-209916 https://cve.radiocsirt.org/vuln/fkie_cve-2024-13247 fkie_cve-2024-13247 2026-10-04T19:39:53.373018+00:00

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Coffee allows Cross-Site Scripting (XSS).This issue affects Coffee: from 0.0.0 before 1.4.0.

 https://cve.radiocsirt.org/vuln/ghsa-chpw-4vjg-cp92 GHSA-chpw-4vjg-cp92 2026-10-04T19:39:53.373040+00:00

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Coffee allows Cross-Site Scripting (XSS).This issue affects Coffee: from 0.0.0 before 1.4.0.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0517 WID-SEC-W-2024-0517 — Drupal Extensions: Mehrere Schwachstellen 2026-10-04T19:39:53.373054+00:00

Ein entfernter Angreifer kann mehrere Schwachstellen in verschiedenen Erweiterungen für Drupal ausnutzen, um einen Cross-Site-Scripting-Angriff zu starten oder um Sicherheitsmaßnahmen zu umgehen.