Code injection

The Webform Report project 7.x-1.x-dev for Drupal allows remote attackers to view submissions by visiting the /rss.xml page. NOTE: This project is not covered by Drupal's security advisory policy...

Drupal Security Vulnerabilities

Drupal is an open source content management system developed in the PHP language by the Drupal community. A security vulnerability in Drupal Webform Report project 7.x-1.x-dev allows remote attackers to view submitted content by accessing the rss.xml page...

CVE-2019-25012

CVE-2019-25012 (Webform Report for Drupal 7.x-1.x-dev) : The vulnerability allows remote attackers to view submissions by accessing the /rss.xml page. The connected records confirm the affected component is the Webform Report project for Drupal; no further technical details (affected versions bey...