Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 16 Oct 2026 10:34:11 +0000 bdu:2021-04621 https://cve.radiocsirt.org/vuln/bdu:2021-04621 bdu:2021-04621 https://cve.radiocsirt.org/vuln/bdu:2021-04621 BIT-drupal-2020-13666 https://cve.radiocsirt.org/vuln/bit-drupal-2020-13666 <p><strong>Affected:</strong> Bitnami: drupal</p> <p>Cross-site scripting vulnerability in Drupal Core. Drupal AJAX API does not disable JSONP by default, allowing for an XSS attack. This issue affects: Drupal Drupal Core 7.x versions prior to 7.73; 8.8.x versions prior to 8.8.10; 8.9.x versions prior to 8.9.6; 9.0.x versions prior to 9.0.6.</p> <p><strong>Affected:</strong> Bitnami: drupal</p> <p>Cross-site scripting vulnerability in Drupal Core. Drupal AJAX API does not disable JSONP by default, allowing for an XSS attack. This issue affects: Drupal Drupal Core 7.x versions prior to 7.73; 8.8.x versions prior to 8.8.10; 8.9.x versions prior to 8.9.6; 9.0.x versions prior to 9.0.6.</p> https://cve.radiocsirt.org/vuln/bit-drupal-2020-13666 certfr-2020-avi-577 — De multiples vulnérabilités ont été découvertes dans Drupal core. Elles permettent à un attaquant de provoquer une atte… https://cve.radiocsirt.org/vuln/certfr-2020-avi-577 certfr-2020-avi-577 https://cve.radiocsirt.org/vuln/certfr-2020-avi-577 CLEANSTART-2024-AP37400 — Cross-site scripting vulnerability in Drupal Core https://cve.radiocsirt.org/vuln/cleanstart-2024-ap37400 <p><strong>Affected:</strong> CleanStart: drupal7</p> <p>Security vulnerability affects the drupal7 package. Cross-site scripting vulnerability in Drupal Core.</p> <p><strong>Affected:</strong> CleanStart: drupal7</p> <p>Security vulnerability affects the drupal7 package. Cross-site scripting vulnerability in Drupal Core.</p> https://cve.radiocsirt.org/vuln/cleanstart-2024-ap37400 EUVD-2026-41935 https://cve.radiocsirt.org/vuln/euvd-2026-41935 EUVD-2026-41935 https://cve.radiocsirt.org/vuln/euvd-2026-41935 fkie_cve-2020-13666 https://cve.radiocsirt.org/vuln/fkie_cve-2020-13666 <p>Cross-site scripting vulnerability in Drupal Core. Drupal AJAX API does not disable JSONP by default, allowing for an XSS attack. This issue affects: Drupal Drupal Core 7.x versions prior to 7.73; 8.8.x versions prior to 8.8.10; 8.9.x versions prior to 8.9.6; 9.0.x versions prior to 9.0.6.</p> <p>Cross-site scripting vulnerability in Drupal Core. Drupal AJAX API does not disable JSONP by default, allowing for an XSS attack. This issue affects: Drupal Drupal Core 7.x versions prior to 7.73; 8.8.x versions prior to 8.8.10; 8.9.x versions prior to 8.9.6; 9.0.x versions prior to 9.0.6.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-13666 GHSA-8jj2-x2gc-ggm7 — Drupal Core Cross-site scripting vulnerability https://cve.radiocsirt.org/vuln/ghsa-8jj2-x2gc-ggm7 <p><strong>Affected:</strong> Packagist: drupal/core, Packagist: drupal/drupal</p> <p>Cross-site scripting vulnerability in Drupal Core. Drupal AJAX API does not disable JSONP by default, allowing for an XSS attack. This issue affects: Drupal Drupal Core 7.x versions prior to 7.73; 8.8.x versions prior to 8.8.10; 8.9.x versions prior to 8.9.6; 9.0.x versions prior to 9.0.6.</p> <p><strong>Affected:</strong> Packagist: drupal/core, Packagist: drupal/drupal</p> <p>Cross-site scripting vulnerability in Drupal Core. Drupal AJAX API does not disable JSONP by default, allowing for an XSS attack. This issue affects: Drupal Drupal Core 7.x versions prior to 7.73; 8.8.x versions prior to 8.8.10; 8.9.x versions prior to 8.9.6; 9.0.x versions prior to 9.0.6.</p> https://cve.radiocsirt.org/vuln/ghsa-8jj2-x2gc-ggm7 gsd-2020-13666 https://cve.radiocsirt.org/vuln/gsd-2020-13666 gsd-2020-13666 https://cve.radiocsirt.org/vuln/gsd-2020-13666 UBUNTU-CVE-2020-13666 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-13666 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: drupal7, Ubuntu:Pro:16.04:LTS: drupal7</p> <p>Cross-site scripting vulnerability in Drupal Core. Drupal AJAX API does not disable JSONP by default, allowing for an XSS attack. This issue affects: Drupal Drupal Core 7.x versions prior to 7.73; 8.8.x versions prior to 8.8.10; 8.9.x versions prior to 8.9.6; 9.0.x versions prior to 9.0.6.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: drupal7, Ubuntu:Pro:16.04:LTS: drupal7</p> <p>Cross-site scripting vulnerability in Drupal Core. Drupal AJAX API does not disable JSONP by default, allowing for an XSS attack. This issue affects: Drupal Drupal Core 7.x versions prior to 7.73; 8.8.x versions prior to 8.8.10; 8.9.x versions prior to 8.9.6; 9.0.x versions prior to 9.0.6.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-13666