CVE-2026-126744

This module renders Layout Builder forms inside an iframe in a modal dialog, using the admin theme. The module provides its own Ajax command to open the iframe dialog. This command does not sanitize the dialog options the same way Drupal core does since "SA-CORE-2026-001"...

DRUPAL-CONTRIB-2026-335

This module renders Layout Builder forms inside an iframe in a modal dialog, using the admin theme. The module provides its own Ajax command to open the iframe dialog. This command does not sanitize the dialog options the same way Drupal core does since SA-CORE-2026-001, which can lead to a...

PT-2026-145659

This module renders Layout Builder forms inside an iframe in a modal dialog, using the admin theme. The module provides its own Ajax command to open the iframe dialog. This command does not sanitize the dialog options the same way Drupal core does since SA-CORE-2026-001, which can lead to a...

CVE-2018-13418

System command injection in ajaxdata.php in TerraMaster TOS 3.1.03 allows attackers to execute system commands via the "newname" parameter...