17308 matches found
CVE-2026-16638 Media Folders - Moderately critical - Cross site scripting - SA-CONTRIB-2026-080
Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Media Folders allows Stored XSS. This issue affects Media Folders versions: from 0.0.0 to 1.0.8...
CVE-2026-16638 Media Folders - Moderately critical - Cross site scripting - SA-CONTRIB-2026-080
Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Media Folders allows Stored XSS. This issue affects Media Folders versions: from 0.0.0 to 1.0.8...
CVE-2026-16638 Media Folders - Moderately critical - Cross site scripting - SA-CONTRIB-2026-080
Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Media Folders allows Stored XSS. This issue affects Media Folders versions: from 0.0.0 to 1.0.8...
CVE-2026-16638
Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Media Folders allows Stored XSS. This issue affects Media Folders versions: from 0.0.0 to 1.0.8...
CVE-2026-16638
The Drupal Media Folders module (versions 0.0.0 through 1.0.8 ) is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is the insufficient sanitization of names and descriptions of media items and folders when they are displayed within the media browser. An attacker with the necessar...
CVE-2026-16639 Internationalization Single Sign-On - Critical - Access bypass - SA-CONTRIB-2026-081
Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Internationalization Single Sign-On allows Authentication Bypass. This issue affects Internationalization Single Sign-On versions: from 0.0.0 to 1.8.0...
CVE-2026-16639
The Drupal Internationalization Single Sign-On module (versions 0.0.0 to 1.8.0 ) is vulnerable to an authentication bypass due to insufficient validation of a short-lived token. In multilingual website scenarios using different domain names per language, an attacker can bypass access controls to ...
CVE-2026-16639 Internationalization Single Sign-On - Critical - Access bypass - SA-CONTRIB-2026-081
Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Internationalization Single Sign-On allows Authentication Bypass. This issue affects Internationalization Single Sign-On versions: from 0.0.0 to 1.8.0...
CVE-2026-16639
Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Internationalization Single Sign-On allows Authentication Bypass. This issue affects Internationalization Single Sign-On versions: from 0.0.0 to 1.8.0...
CVE-2026-16640 Search API Autocomplete - Moderately critical - Cross-site Scripting - SA-CONTRIB-2026-082
Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Search API Autocomplete allows Reflected XSS. This issue affects Search API Autocomplete versions: from 0.0.0 to 1.12.0...
CVE-2026-16640 Search API Autocomplete - Moderately critical - Cross-site Scripting - SA-CONTRIB-2026-082
Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Search API Autocomplete allows Reflected XSS. This issue affects Search API Autocomplete versions: from 0.0.0 to 1.12.0...
CVE-2026-16640
The Drupal Search API Autocomplete module (versions 0.0.0 through 1.12.0 ) is vulnerable to Reflected Cross-site Scripting (XSS) due to improper neutralization of input during web page generation. The flaw resides in a test script accessible to anonymous users that fails to sufficiently validate ...
CVE-2026-16646 PanKM - Critical - Unsupported - SA-CONTRIB-2026-083
Vulnerability in Drupal PanKM. This issue affects PanKM versions:...
CVE-2026-16646
The Drupal PanKM project is marked as unsupported by the security team due to a known security issue that has not been fixed by the maintainer. Rapid7 identifies the vulnerability as Missing Authentication for Critical Function . The issue affects all versions (. ) of PanKM. Technical details reg...
CVE-2026-16646 PanKM - Critical - Unsupported - SA-CONTRIB-2026-083
Vulnerability in Drupal PanKM. This issue affects PanKM versions:...
CVE-2026-16641
A security issue exists in Drupal Commerce Elavon (affected versions . ). The project has been marked as unsupported by the security team because a known security flaw remains unaddressed by the maintainer. While Rapid7 identifies the issue as Improper Input Validation , there is currently no inf...
CVE-2026-16641 Commerce Elavon - Critical - Unsupported - SA-CONTRIB-2026-084
Vulnerability in Drupal Commerce Elavon. This issue affects Commerce Elavon versions:...
CVE-2026-16641 Commerce Elavon - Critical - Unsupported - SA-CONTRIB-2026-084
Vulnerability in Drupal Commerce Elavon. This issue affects Commerce Elavon versions:...