https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T09:02:50.608962+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/drupal-contrib-2026-009 DRUPAL-CONTRIB-2026-009 2026-10-03T09:02:50.675516+00:00

Affected: Packagist:https://packages.drupal.org/8: drupal/quickedit

This module allows content to be edited in-place.

The module doesn't sufficiently sanitize certain image-related values during the editing process leading to a persistent Cross-site Scripting (XSS) vulnerability.

This vulnerability is mitigated by the fact that an attacker must have permission to create or edit an affected field.

 https://cve.radiocsirt.org/vuln/euvd-2026-277548 EUVD-2026-277548 2026-10-03T09:02:50.675569+00:00 EUVD-2026-277548 https://cve.radiocsirt.org/vuln/fkie_cve-2026-2348 fkie_cve-2026-2348 2026-10-03T09:02:50.675585+00:00

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Quick Edit allows Cross-Site Scripting (XSS).This issue affects Quick Edit: from 0.0.0 before 1.0.5, from 2.0.0 before 2.0.1.

 https://cve.radiocsirt.org/vuln/ghsa-vmwp-f54q-chhh GHSA-vmwp-f54q-chhh 2026-10-03T09:02:50.675609+00:00

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Quick Edit allows Cross-Site Scripting (XSS).This issue affects Quick Edit: from 0.0.0 before 1.0.5, from 2.0.0 before 2.0.1.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0397 WID-SEC-W-2026-0397 — Drupal Module (UI Icons, Quick Edit): Mehrere Schwachstellen ermöglichen Cross-Site Scripting 2026-10-03T09:02:50.675624+00:00

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Drupal ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.