https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T05:51:08.555481+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2025-00851 bdu:2025-00851 2026-10-03T05:51:08.559936+00:00 bdu:2025-00851 https://cve.radiocsirt.org/vuln/drupal-contrib-2024-029 DRUPAL-CONTRIB-2024-029 2026-10-03T05:51:08.559967+00:00

Affected: Packagist:https://packages.drupal.org/8: drupal/opigno_learning_path

The Opigno Learning Path module enables you to manage group content.

Administrative forms allow uploading malicious files which may contain arbitrary code (RCE) or cross site scriptiong (XSS). These forms were not adequately controlled with permissions that communicate the severity of the permission.

This vulnerability is mitigated by the fact that an attacker must have a role with the permission "Manage group content in any group".

 https://cve.radiocsirt.org/vuln/euvd-2026-210438 EUVD-2026-210438 2026-10-03T05:51:08.560002+00:00 EUVD-2026-210438 https://cve.radiocsirt.org/vuln/fkie_cve-2024-13265 fkie_cve-2024-13265 2026-10-03T05:51:08.560015+00:00

Improper Neutralization of Directives in Statically Saved Code ('Static Code Injection') vulnerability in Drupal Opigno Learning path allows PHP Local File Inclusion.This issue affects Opigno Learning path: from 0.0.0 before 3.1.2.

 https://cve.radiocsirt.org/vuln/ghsa-2rx4-vrv5-3mjp GHSA-2rx4-vrv5-3mjp 2026-10-03T05:51:08.560035+00:00

Improper Neutralization of Directives in Statically Saved Code ('Static Code Injection') vulnerability in Drupal Opigno Learning path allows PHP Local File Inclusion.This issue affects Opigno Learning path: from 0.0.0 before 3.1.2.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1791 WID-SEC-W-2024-1791 — Drupal: Mehrere Schwachstellen ermöglichen Codeausführung und Cross Site Scripting 2026-10-03T05:51:08.560050+00:00

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Drupal ausnutzen, um beliebigen Programmcode auszuführen und einen Cross-Site-Scripting-Angriff durchzuführen.