https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 18:24:31 +0000 https://cve.radiocsirt.org/vuln/drupal-contrib-2026-042 <p><strong>Affected:</strong> Packagist:https://packages.drupal.org/8: drupal/cleantalk</p> <p>This module provides spam protection using the CleanTalk cloud service.</p> <p>The module doesn&#39;t sufficiently sanitize API response messages before rendering them in HTML output. The `_cleantalk_die()` and `ct_die()` functions output the CleanTalk API response message directly into HTML without proper sanitization, allowing potential injection of arbitrary HTML or JavaScript.</p> <p>This vulnerability is mitigated by the fact that an attacker must be able to influence the CleanTalk cloud API response (e.g., through a man-in-the-middle attack or a compromised API server).</p> <p><strong>Affected:</strong> Packagist:https://packages.drupal.org/8: drupal/cleantalk</p> <p>This module provides spam protection using the CleanTalk cloud service.</p> <p>The module doesn&#39;t sufficiently sanitize API response messages before rendering them in HTML output. The `_cleantalk_die()` and `ct_die()` functions output the CleanTalk API response message directly into HTML without proper sanitization, allowing potential injection of arbitrary HTML or JavaScript.</p> <p>This vulnerability is mitigated by the fact that an attacker must be able to influence the CleanTalk cloud API response (e.g., through a man-in-the-middle attack or a compromised API server).</p> https://cve.radiocsirt.org/vuln/drupal-contrib-2026-042 https://cve.radiocsirt.org/vuln/euvd-2026-336484 EUVD-2026-336484 https://cve.radiocsirt.org/vuln/euvd-2026-336484 https://cve.radiocsirt.org/vuln/fkie_cve-2026-10770 <p>Improper Neutralization of Input During Web Page Generation (&#34;Cross-site Scripting&#34;) vulnerability in Drupal Anti-Spam by CleanTalk allows Reflected XSS. This issue affects Anti-Spam by CleanTalk versions: from 0.0.0 to 9.7.1.</p> <p>Improper Neutralization of Input During Web Page Generation (&#34;Cross-site Scripting&#34;) vulnerability in Drupal Anti-Spam by CleanTalk allows Reflected XSS. This issue affects Anti-Spam by CleanTalk versions: from 0.0.0 to 9.7.1.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-10770 https://cve.radiocsirt.org/vuln/ghsa-fhcj-f666-rhjr <p>Improper Neutralization of Input During Web Page Generation (&#34;Cross-site Scripting&#34;) vulnerability in Drupal Anti-Spam by CleanTalk allows Reflected XSS. This issue affects Anti-Spam by CleanTalk versions: from 0.0.0 to 9.7.1.</p> <p>Improper Neutralization of Input During Web Page Generation (&#34;Cross-site Scripting&#34;) vulnerability in Drupal Anti-Spam by CleanTalk allows Reflected XSS. This issue affects Anti-Spam by CleanTalk versions: from 0.0.0 to 9.7.1.</p> https://cve.radiocsirt.org/vuln/ghsa-fhcj-f666-rhjr https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1799 <p>Ein entfernter Angreifer kann mehrere Schwachstellen in verschiedenen Drupal Erweiterungen ausnutzen, um Daten zu manipulieren oder offenzulegen, sowie um Cross-Site Scripting Angriffe durchzuführen.</p> <p>Ein entfernter Angreifer kann mehrere Schwachstellen in verschiedenen Drupal Erweiterungen ausnutzen, um Daten zu manipulieren oder offenzulegen, sowie um Cross-Site Scripting Angriffe durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1799