https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T09:11:15.172470+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2025-01163 bdu:2025-01163 2026-10-03T09:11:15.272360+00:00 bdu:2025-01163 https://cve.radiocsirt.org/vuln/drupal-contrib-2024-047 DRUPAL-CONTRIB-2024-047 2026-10-03T09:11:15.272406+00:00

Affected: Packagist:https://packages.drupal.org/8: drupal/facets

This module enables you to to easily create and manage faceted search interfaces.

The module doesn't sufficiently filter for malicious script leading to a reflected cross site scripting (XSS) vulnerability.

The vulnerability exists in the Facets Summary submodule. If you do not use that sub module your site is not vulnerable to this issue.

*Edited October 9, 2024: clarified that Facets Summary is where the vulnerability is located*

 https://cve.radiocsirt.org/vuln/euvd-2026-209928 EUVD-2026-209928 2026-10-03T09:11:15.272455+00:00 EUVD-2026-209928 https://cve.radiocsirt.org/vuln/fkie_cve-2024-13283 fkie_cve-2024-13283 2026-10-03T09:11:15.272475+00:00

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Facets allows Cross-Site Scripting (XSS).This issue affects Facets: from 0.0.0 before 2.0.9.

 https://cve.radiocsirt.org/vuln/ghsa-37wj-v394-2xvc GHSA-37wj-v394-2xvc 2026-10-03T09:11:15.272507+00:00

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Facets allows Cross-Site Scripting (XSS).This issue affects Facets: from 0.0.0 before 2.0.9.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3127 WID-SEC-W-2024-3127 — Drupal: Mehrere Schwachstellen 2026-10-03T09:11:15.272529+00:00

Ein Angreifer kann mehrere Schwachstellen in Drupal ausnutzen, um Sicherheitsmaßnahmen zu umgehen, einen Cross-Site-Scripting-Angriff durchzuführen oder vertrauliche Informationen offenzulegen.