https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T15:37:43.066614+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/drupal-contrib-2026-035 DRUPAL-CONTRIB-2026-035 2026-10-03T15:37:43.132780+00:00

Affected: Packagist:https://packages.drupal.org/8: drupal/gtranslate

The GTranslate module provides a language switcher widget for Drupal sites.

The module’s widget JavaScript did not sufficiently validate that document.currentScript referred to the executing script element. A user who can add HTML to a page could cause the generated language-switcher links to point to an unintended domain.

This vulnerability is mitigated by the fact that an attacker must be able to add HTML with attributes that are not allowed by Drupal’s default CKEditor configuration. It is also limited to sites using the paid versions of GTranslate widget JavaScript and configurations where the generated language links use script-provided values.

 https://cve.radiocsirt.org/vuln/euvd-2026-319735 EUVD-2026-319735 2026-10-03T15:37:43.132841+00:00 EUVD-2026-319735 https://cve.radiocsirt.org/vuln/fkie_cve-2026-8492 fkie_cve-2026-8492 2026-10-03T15:37:43.132858+00:00

Modification of Assumed-Immutable Data (MAID) vulnerability in Drupal Translate Drupal with GTranslate allows Resource Location Spoofing.

This issue affects Translate Drupal with GTranslate: from 0.0.0 before 3.0.5.

 https://cve.radiocsirt.org/vuln/ghsa-p6f3-29pv-cj66 GHSA-p6f3-29pv-cj66 2026-10-03T15:37:43.132882+00:00

Modification of Assumed-Immutable Data (MAID) vulnerability in Drupal Translate Drupal with GTranslate allows Resource Location Spoofing.

This issue affects Translate Drupal with GTranslate: from 0.0.0 before 3.0.5.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1533 WID-SEC-W-2026-1533 — Drupal Extensions: Mehrere Schwachstellen 2026-10-03T15:37:43.132906+00:00

Ein Angreifer kann mehrere Schwachstellen in Drupal ausnutzen, um Informationen offenzulegen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren oder Cross-Site-Scripting-Angriffe durchzuführen.