https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 20:42:32 +0000 https://cve.radiocsirt.org/vuln/drupal-contrib-2026-052 <p><strong>Affected:</strong> Packagist:https://packages.drupal.org/8: drupal/admin_feedback</p> <p>This module enables you to collect feedback from your site visitors on content pages, allowing them to optionally attach a free-text comment to their Yes/No vote.</p> <p>The module doesn&#39;t sufficiently verify authorization over the targeted feedback record when processing a comment submission.</p> <p>This vulnerability is mitigated by the fact that an attacker must have a role with the permission &#34;give feedback&#34;. Note: &#34;give feedback&#34; is granted to anonymous and authenticated by default on install.</p> <p><strong>Affected:</strong> Packagist:https://packages.drupal.org/8: drupal/admin_feedback</p> <p>This module enables you to collect feedback from your site visitors on content pages, allowing them to optionally attach a free-text comment to their Yes/No vote.</p> <p>The module doesn&#39;t sufficiently verify authorization over the targeted feedback record when processing a comment submission.</p> <p>This vulnerability is mitigated by the fact that an attacker must have a role with the permission &#34;give feedback&#34;. Note: &#34;give feedback&#34; is granted to anonymous and authenticated by default on install.</p> https://cve.radiocsirt.org/vuln/drupal-contrib-2026-052 https://cve.radiocsirt.org/vuln/euvd-2026-336106 EUVD-2026-336106 https://cve.radiocsirt.org/vuln/euvd-2026-336106 https://cve.radiocsirt.org/vuln/fkie_cve-2026-13232 <p>Incorrect Authorization vulnerability in Drupal Advanced Content Feedback (aka admin_feedback) allows Forceful Browsing. This issue affects Advanced Content Feedback (aka admin_feedback) versions: from 0.0.0 to 2.8.0.</p> <p>Incorrect Authorization vulnerability in Drupal Advanced Content Feedback (aka admin_feedback) allows Forceful Browsing. This issue affects Advanced Content Feedback (aka admin_feedback) versions: from 0.0.0 to 2.8.0.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-13232 https://cve.radiocsirt.org/vuln/ghsa-6xj8-mcp3-72g6 <p>Incorrect Authorization vulnerability in Drupal Advanced Content Feedback (aka admin_feedback) allows Forceful Browsing. This issue affects Advanced Content Feedback (aka admin_feedback) versions: from 0.0.0 to 2.8.0.</p> <p>Incorrect Authorization vulnerability in Drupal Advanced Content Feedback (aka admin_feedback) allows Forceful Browsing. This issue affects Advanced Content Feedback (aka admin_feedback) versions: from 0.0.0 to 2.8.0.</p> https://cve.radiocsirt.org/vuln/ghsa-6xj8-mcp3-72g6 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2080 <p>Ein Angreifer kann mehrere Schwachstellen in Drupal ausnutzen, um Sicherheitsvorkehrungen zu umgehen, um einen Cross-Site Scripting Angriff durchzuführen, um Informationen offenzulegen, um einen SQL-Injection Angriff durchzuführen, und um Daten zu manipulieren.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Drupal ausnutzen, um Sicherheitsvorkehrungen zu umgehen, um einen Cross-Site Scripting Angriff durchzuführen, um Informationen offenzulegen, um einen SQL-Injection Angriff durchzuführen, und um Daten zu manipulieren.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2080