https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 13:45:33 +0000 https://cve.radiocsirt.org/vuln/bdu:2024-11029 bdu:2024-11029 https://cve.radiocsirt.org/vuln/bdu:2024-11029 https://cve.radiocsirt.org/vuln/bit-drupal-2024-12393 <p><strong>Affected:</strong> Bitnami: drupal</p> <p>Improper Neutralization of Input During Web Page Generation (XSS or &#39;Cross-site Scripting&#39;) vulnerability in Drupal Core allows Cross-Site Scripting (XSS).This issue affects Drupal Core: from 8.8.0 before 10.2.11, from 10.3.0 before 10.3.9, from 11.0.0 before 11.0.8.</p> <p><strong>Affected:</strong> Bitnami: drupal</p> <p>Improper Neutralization of Input During Web Page Generation (XSS or &#39;Cross-site Scripting&#39;) vulnerability in Drupal Core allows Cross-Site Scripting (XSS).This issue affects Drupal Core: from 8.8.0 before 10.2.11, from 10.3.0 before 10.3.9, from 11.0.0 before 11.0.8.</p> https://cve.radiocsirt.org/vuln/bit-drupal-2024-12393 https://cve.radiocsirt.org/vuln/euvd-2026-206803 EUVD-2026-206803 https://cve.radiocsirt.org/vuln/euvd-2026-206803 https://cve.radiocsirt.org/vuln/fkie_cve-2024-12393 <p>Improper Neutralization of Input During Web Page Generation (XSS or &#39;Cross-site Scripting&#39;) vulnerability in Drupal Core allows Cross-Site Scripting (XSS).This issue affects Drupal Core: from 8.8.0 before 10.2.11, from 10.3.0 before 10.3.9, from 11.0.0 before 11.0.8.</p> <p>Improper Neutralization of Input During Web Page Generation (XSS or &#39;Cross-site Scripting&#39;) vulnerability in Drupal Core allows Cross-Site Scripting (XSS).This issue affects Drupal Core: from 8.8.0 before 10.2.11, from 10.3.0 before 10.3.9, from 11.0.0 before 11.0.8.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-12393 https://cve.radiocsirt.org/vuln/ghsa-8mvq-8h2v-j9vf <p><strong>Affected:</strong> Packagist: drupal/core, Packagist: drupal/core-recommended, Packagist: drupal/drupal</p> <p>Drupal uses JavaScript to render status messages in some cases and configurations. In certain situations, the status messages are not adequately sanitized. This issue affects Drupal Core: from 8.8.0 before 10.2.11, from 10.3.0 before 10.3.9, from 11.0.0 before 11.0.8.</p> <p><strong>Affected:</strong> Packagist: drupal/core, Packagist: drupal/core-recommended, Packagist: drupal/drupal</p> <p>Drupal uses JavaScript to render status messages in some cases and configurations. In certain situations, the status messages are not adequately sanitized. This issue affects Drupal Core: from 8.8.0 before 10.2.11, from 10.3.0 before 10.3.9, from 11.0.0 before 11.0.8.</p> https://cve.radiocsirt.org/vuln/ghsa-8mvq-8h2v-j9vf https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-12393 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: drupal7, Ubuntu:Pro:16.04:LTS: drupal7</p> <p>Improper Neutralization of Input During Web Page Generation (XSS or &#39;Cross-site Scripting&#39;) vulnerability in Drupal Core allows Cross-Site Scripting (XSS).This issue affects Drupal Core: from 8.8.0 before 10.2.11, from 10.3.0 before 10.3.9, from 11.0.0 before 11.0.8.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: drupal7, Ubuntu:Pro:16.04:LTS: drupal7</p> <p>Improper Neutralization of Input During Web Page Generation (XSS or &#39;Cross-site Scripting&#39;) vulnerability in Drupal Core allows Cross-Site Scripting (XSS).This issue affects Drupal Core: from 8.8.0 before 10.2.11, from 10.3.0 before 10.3.9, from 11.0.0 before 11.0.8.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-12393 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3520 <p>Ein Angreifer kann mehrere Schwachstellen in Drupal ausnutzen, um beliebigen Programmcode auszuführen, Daten zu manipulieren, Sicherheitsmaßnahmen zu umgehen und einen Cross-Site-Scripting-Angriff durchzuführen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Drupal ausnutzen, um beliebigen Programmcode auszuführen, Daten zu manipulieren, Sicherheitsmaßnahmen zu umgehen und einen Cross-Site-Scripting-Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3520