1149318 matches found
CVE-2026-96358
The Drupal Webform module is vulnerable to Cross-Site Scripting (XSS) due to insufficient validation of data within its rating element . This vulnerability affects Webform versions 0.0.0 to 6.2.12 and 6.3.0 to 6.3.1 . An attacker can potentially execute malicious scripts on a page containing a ra...
CVE-2026-96358 Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-158
Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Webform allows Cross-Site Scripting XSS. This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1...
CVE-2026-96358 Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-158
Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Webform allows Cross-Site Scripting XSS. This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1...
EUVD-2026-107842
Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Webform allows Cross-Site Scripting XSS. This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1...
CVE-2026-96359
The Drupal Webform module is vulnerable to a Cross-site Scripting (XSS) vulnerability (CWE-79) due to insufficient sanitization of attributes used by its color element . When the element is rendered, specially crafted attributes can execute malicious scripts. This issue specifically affects Webfo...
CVE-2026-96359 Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-159
Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Webform allows Cross-Site Scripting XSS. This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1...
CVE-2026-96359 Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-159
Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Webform allows Cross-Site Scripting XSS. This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1...
EUVD-2026-107841
Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Webform allows Cross-Site Scripting XSS. This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1...
CVE-2026-96362
The Drupal Webform module is vulnerable to Cross-Site Scripting (XSS) due to insufficient filtering of response values from Remote Post handlers . When these handlers send data to external APIs, the module fails to properly sanitize the returned values before they are rendered via handler respons...
CVE-2026-96362 Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-160
Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Webform allows Cross-Site Scripting XSS. This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1...
CVE-2026-96362 Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-160
Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Webform allows Cross-Site Scripting XSS. This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1...
CVE-2026-96368
The Drupal Webform module is vulnerable to Stored Cross-Site Scripting (XSS) due to insufficient sanitization of certain tooltips and help text provided by site builders. This vulnerability affects Webform versions 0.0.0 to 6.2.12 and 6.3.0 to 6.3.1 . The risk is mitigated by the requirement that...
CVE-2026-96368 Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-163
Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Webform allows Stored XSS. This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1...
CVE-2026-96368 Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-163
Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Webform allows Stored XSS. This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1...
CVE-2026-96357
The Drupal Webform module is vulnerable to Stored Cross-Site Scripting (XSS) because it fails to sufficiently force certain uploaded file types to download when served. Under specific site configurations, a browser may render an uploaded file inline, executing malicious scripts. This affects Webf...
CVE-2026-96357 Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-172
Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Webform allows Stored XSS. This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1...
CVE-2026-96382 Diba carousel slider - Moderately critical - Cross Site Scripting (XSS) - SA-CONTRIB-2026-191
Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Diba carousel slider allows Stored XSS. This issue affects Diba carousel slider versions: from 0.0.0 to 3.0.2...
CVE-2026-30691
CVE-2026-30691 - Vulnerability Advisory Official MITRE vulnerability record details and technical documentation for CVE-2026-30691. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Suggested description Cross-Site Scripting XSS vulnerability in @cyntler/react-doc-viewer v1.17.1 allows remote...
RootQuest-CTF-Box-Multi-Stage-Exploitation-VM
RootQuest CTF Box — Multi-Stage Exploitation VM 💀 Kalaichelvan Thieveshkar CB013248 · Staffordshire University · COMP50003 - Cyber Security II Overview RootQuest is a purpose-built CTF virtual machine that contains a 10-stage , sequential attack path spanning 5 security domains. Each challenge...
