Most recent entries from all

bdu:2026-07318

BIT-drupal-2026-6367 — Drupal core - Moderately critical - Cross-site scripting - SA-CORE-2026-003

Affected: Bitnami: drupal

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Drupal core allows Cross-Site Scripting (XSS).

This issue affects Drupal core: from 11.3.0 before 11.3.7.

certfr-2026-avi-0447 — De multiples vulnérabilités ont été découvertes dans Drupal. Elles permettent à un attaquant de provoquer une exécution…

certfr-2026-avi-0447

EUVD-2026-328909

fkie_cve-2026-6367

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Drupal core allows Cross-Site Scripting (XSS).

This issue affects Drupal core: from 11.3.0 before 11.3.7.

GHSA-pw6f-3999-xp7g — Drupal core allows Cross-Site Scripting (XSS)

Affected: Packagist: drupal/core

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Drupal core allows Cross-Site Scripting (XSS).

This issue affects Drupal core: from 11.3.0 before 11.3.7.

WID-SEC-W-2026-1151 — Drupal Core: Mehrere Schwachstellen

Ein Angreifer kann mehrere Schwachstellen in Drupal Core ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen, und um beliebigen Programmcode auszuführen.