https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T05:20:26.979927+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-drupal-2025-31675 BIT-drupal-2025-31675 — Drupal core - Moderately critical - Cross Site Scripting - SA-CORE-2025-004 2026-10-09T05:20:27.035800+00:00

Affected: Bitnami: drupal

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Drupal core allows Cross-Site Scripting (XSS).This issue affects Drupal core: from 8.0.0 before 10.3.14, from 10.4.0 before 10.4.5, from 11.0.0 before 11.0.13, from 11.1.0 before 11.1.5. It also affects the Drupal 7 module from versions 7.x-1.0 through 7.x-1.12.

 https://cve.radiocsirt.org/vuln/euvd-2026-280063 EUVD-2026-280063 2026-10-09T05:20:27.035885+00:00 EUVD-2026-280063 https://cve.radiocsirt.org/vuln/fkie_cve-2025-31675 fkie_cve-2025-31675 2026-10-09T05:20:27.035914+00:00

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Drupal core allows Cross-Site Scripting (XSS).This issue affects Drupal core: from 8.0.0 before 10.3.14, from 10.4.0 before 10.4.5, from 11.0.0 before 11.0.13, from 11.1.0 before 11.1.5. It also affects the Drupal 7 module from versions 7.x-1.0 through 7.x-1.12.

 https://cve.radiocsirt.org/vuln/ghsa-m4wj-hhwj-47qp GHSA-m4wj-hhwj-47qp — Drupal Core Cross-Site Scripting (XSS) Vulnerability 2026-10-09T05:20:27.035956+00:00

Affected: Packagist: drupal/core

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Drupal core allows Cross-Site Scripting (XSS).This issue affects Drupal core: from 8.0.0 before 10.3.14, from 10.4.0 before 10.4.5, from 11.0.0 before 11.0.13, from 11.1.0 before 11.1.5.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0599 WID-SEC-W-2025-0599 — Drupal: Mehrere Schwachstellen ermöglichen Cross-Site Scripting 2026-10-09T05:20:27.035999+00:00

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Drupal und mehreren Erweiterungen ausnutzen, um einen Cross-Site-Scripting-Angriff durchzuführen.