CVE-2026-87938

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Drupal CSP log allows SQL Injection. This issue affects CSP log versions: from 0.0.0 to 1.0.2...

CVE-2026-87938

The CSP Log module for Drupal (versions 0.0.0 to 1.0.2 ) is vulnerable to SQL Injection due to insufficient sanitization of user-supplied values used in database queries. An attacker must possess an account with the Access CSP reports permission to exploit this vulnerability. Exploitation details...

CVE-2026-87938 CSP log - Critical - SQL Injection - SA-CONTRIB-2026-136

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Drupal CSP log allows SQL Injection. This issue affects CSP log versions: from 0.0.0 to 1.0.2...

EUVD-2026-107863

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Drupal CSP log allows SQL Injection. This issue affects CSP log versions: from 0.0.0 to 1.0.2...

CVE-2026-87938

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Drupal CSP log allows SQL Injection. This issue affects CSP log versions: from 0.0.0 to 1.0.2...

DRUPAL-CONTRIB-2026-136

The CSP Log module enhances any module that adds the CSP header to a site, by providing a reporting endpoint, custom storage, and aggregated reports that can be used to trace issues or adapt the CSP headers. The module did not sufficiently sanitize user-supplied values used in database queries,...

PT-2026-89238

Name of the Vulnerable Software and Affected Versions CSP log versions 0.0.0 through 1.0.2 Description The CSP Log module, which provides a reporting endpoint and custom storage for Content Security Policy CSP headers, fails to sufficiently sanitize user-supplied values used in database queries...

CSP log - Critical - SQL Injection - SA-CONTRIB-2026-136

The CSP Log module enhances any module that adds the CSP header to a site, by providing a reporting endpoint, custom storage, and aggregated reports that can be used to trace issues or adapt the CSP headers. The module did not sufficiently sanitize user-supplied values used in database queries,...