https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-27T10:04:59.978212+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/drupal-contrib-2026-032 DRUPAL-CONTRIB-2026-032 2026-10-27T10:04:59.982118+00:00

Affected: Packagist:https://packages.drupal.org/8: drupal/orejime

The IframeConsent element writes HTML attributes without escaping their value.

This module has a XSS vulnerability. If an attacker is able to write an `<iframe-consent>` tag, they may be able to insert arbitrary JavaScript.

This vulnerability is mitigated by the fact that a text format that allows `iframe-consent` HTML tags with alt attributes in the necessary option (*Enable JS Iframe consent*) must be enabled, and an attacker must have a role allowing the creation or modification of content in a field with text the format.

 https://cve.radiocsirt.org/vuln/euvd-2026-319622 EUVD-2026-319622 2026-10-27T10:04:59.982171+00:00 EUVD-2026-319622 https://cve.radiocsirt.org/vuln/fkie_cve-2026-6095 fkie_cve-2026-6095 2026-10-27T10:04:59.982195+00:00

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Orejime allows Cross-Site Scripting (XSS).

This issue affects Orejime: from 0.0.0 before 2.0.16.

 https://cve.radiocsirt.org/vuln/ghsa-6g8q-jh52-g228 GHSA-6g8q-jh52-g228 2026-10-27T10:04:59.982234+00:00

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Orejime allows Cross-Site Scripting (XSS).

This issue affects Orejime: from 0.0.0 before 2.0.16.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1018 WID-SEC-W-2026-1018 — Drupal (Orejime): Schwachstelle ermöglicht Cross-Site Scripting 2026-10-27T10:04:59.982252+00:00

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Drupal Orejime ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.