Most recent entries from all

DRUPAL-CONTRIB-2025-110

Affected: Packagist:https://packages.drupal.org/8: drupal/currency

This module allows you to use different currencies on your website and do currency conversion.

The module doesn't sufficiently protect routes used to enable and disable currencies from Cross-Site Request Forgery (CSRF) attacks, potentially allowing an attacker to trick an admin into changing settings.

EUVD-2026-257171

fkie_cve-2025-10930

Cross-Site Request Forgery (CSRF) vulnerability in Drupal Currency allows Cross Site Request Forgery.This issue affects Currency: from 0.0.0 before 3.5.0.

GHSA-27fv-rpgj-4c6m — Drupal Currency allows Cross Site Request Forgery

Affected: Packagist: drupal/currency

Cross-Site Request Forgery (CSRF) vulnerability in Drupal Currency allows Cross Site Request Forgery. This issue affects Currency: from 0.0.0 before 3.5.0.

WID-SEC-W-2025-2126 — Drupal Module: Mehrere Schwachstellen

Ein Angreifer kann mehrere Schwachstellen in Drupal Module ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen, um Sicherheitsvorkehrungen zu umgehen, und um falsche Informationen darzustellen.