https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 03:42:29 +0000 https://cve.radiocsirt.org/vuln/drupal-contrib-2026-035 <p><strong>Affected:</strong> Packagist:https://packages.drupal.org/8: drupal/gtranslate</p> <p>The GTranslate module provides a language switcher widget for Drupal sites.</p> <p>The module’s widget JavaScript did not sufficiently validate that document.currentScript referred to the executing script element. A user who can add HTML to a page could cause the generated language-switcher links to point to an unintended domain.</p> <p>This vulnerability is mitigated by the fact that an attacker must be able to add HTML with attributes that are not allowed by Drupal’s default CKEditor configuration. It is also limited to sites using the paid versions of GTranslate widget JavaScript and configurations where the generated language links use script-provided values.</p> <p><strong>Affected:</strong> Packagist:https://packages.drupal.org/8: drupal/gtranslate</p> <p>The GTranslate module provides a language switcher widget for Drupal sites.</p> <p>The module’s widget JavaScript did not sufficiently validate that document.currentScript referred to the executing script element. A user who can add HTML to a page could cause the generated language-switcher links to point to an unintended domain.</p> <p>This vulnerability is mitigated by the fact that an attacker must be able to add HTML with attributes that are not allowed by Drupal’s default CKEditor configuration. It is also limited to sites using the paid versions of GTranslate widget JavaScript and configurations where the generated language links use script-provided values.</p> https://cve.radiocsirt.org/vuln/drupal-contrib-2026-035 https://cve.radiocsirt.org/vuln/euvd-2026-319735 EUVD-2026-319735 https://cve.radiocsirt.org/vuln/euvd-2026-319735 https://cve.radiocsirt.org/vuln/fkie_cve-2026-8492 <p>Modification of Assumed-Immutable Data (MAID) vulnerability in Drupal Translate Drupal with GTranslate allows Resource Location Spoofing.</p> <p>This issue affects Translate Drupal with GTranslate: from 0.0.0 before 3.0.5.</p> <p>Modification of Assumed-Immutable Data (MAID) vulnerability in Drupal Translate Drupal with GTranslate allows Resource Location Spoofing.</p> <p>This issue affects Translate Drupal with GTranslate: from 0.0.0 before 3.0.5.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-8492 https://cve.radiocsirt.org/vuln/ghsa-p6f3-29pv-cj66 <p>Modification of Assumed-Immutable Data (MAID) vulnerability in Drupal Translate Drupal with GTranslate allows Resource Location Spoofing.</p> <p>This issue affects Translate Drupal with GTranslate: from 0.0.0 before 3.0.5.</p> <p>Modification of Assumed-Immutable Data (MAID) vulnerability in Drupal Translate Drupal with GTranslate allows Resource Location Spoofing.</p> <p>This issue affects Translate Drupal with GTranslate: from 0.0.0 before 3.0.5.</p> https://cve.radiocsirt.org/vuln/ghsa-p6f3-29pv-cj66 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1533 <p>Ein Angreifer kann mehrere Schwachstellen in Drupal ausnutzen, um Informationen offenzulegen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren oder Cross-Site-Scripting-Angriffe durchzuführen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Drupal ausnutzen, um Informationen offenzulegen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren oder Cross-Site-Scripting-Angriffe durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1533