17683 matches found
Drupal Search API Solr module < 4.3.9 - Unauthenticated Cross Site Request Forgery (CSRF) vulnerability
Unauthenticated Cross Site Request Forgery CSRF vulnerability discovered by Pierre Rudloff prudloff in WordPress Module Search API Solr versions 4.3.9...
Drupal Colorbox security vulnerability
Drupal Colorbox is a module plugin in the Drupal content management system for the Drupal community. A security vulnerability exists in Drupal Colorbox versions prior to 2.1.3 that stems from improper input neutralization and could lead to a cross-site scripting attack...
Drupal Sportsleague module * - Unauthenticated Other Vulnerability Type vulnerability
Unauthenticated Other Vulnerability Type vulnerability discovered by Drupal Security Site in WordPress Module Sportsleague versions...
Drupal Search API Solr security vulnerability
Drupal Search API Solr is a module plugin in the Drupal content management system from the Drupal community. A security vulnerability exists in Drupal Search API Solr versions prior to 4.3.9 that stems from vulnerability to cross-site request forgery attacks...
Drupal UEditor security vulnerability
Drupal UEditor is a module plugin in the Drupal content management system for the Drupal community. A security vulnerability exists in Drupal UEditor that stems from a problem with the project files that affects usability...
Drupal Sportsleague security vulnerabilities
Drupal Sportsleague is a module plugin in the Drupal content management system for the Drupal community. A security vulnerability exists in Drupal Sportsleague that stems from a problem with the project file that affects usability...
Drupal Block Class security vulnerability
Drupal Block Class is a module plugin in the Drupal content management system for the Drupal community. A security vulnerability exists in Drupal Block Class versions prior to 4.0.1 that stems from improper input neutralization and could lead to a cross-site scripting attack...
PT-2025-17659 · Drupal · Ueditor
Name of the Vulnerable Software and Affected Versions: Drupal UEditor versions . Description: The issue affects UEditor - 百度编辑器, a component of Drupal. Recommendations: For Drupal UEditor version . , update to a version that includes a fix for this issue, as no specific workaround is provided...
PT-2025-17657 · Drupal · Drupal Bootstrap Site Alert
Name of the Vulnerable Software and Affected Versions: Drupal Bootstrap Site Alert versions 0.0.0 through 1.12.0 Drupal Bootstrap Site Alert versions 3.0.0 through 3.0.3 Description: The issue affects Drupal Bootstrap Site Alert, allowing Cross-Site Scripting XSS due to improper neutralization of...
Drupal Bootstrap Site Alert security vulnerability
Drupal Bootstrap Site Alert is a module plugin in the Drupal content management system for the Drupal community. A security vulnerability exists in Drupal Bootstrap Site Alert versions prior to 1.13.0 and 3.0.x versions prior to 3.0.4, which stems from improper input neutralization and could lead...
Drupal Colorbox module < 2.1.3 - Unauthenticated Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS vulnerability discovered by Pierre Rudloff prudloff in WordPress Module Colorbox versions 2.1.3...
Drupal Bootstrap Site Alert module < 1.13.0,3.0.0-3.0.3 - Unauthenticated Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS vulnerability discovered by Mitch Portier arkener in WordPress Module Bootstrap Site Alert versions 1.13.0,3.0.0-3.0.3...
CVE-2025-3907: Cross-Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in Drupal Search API Solr allows Cross Site Request Forgery.This issue affects Search API Solr: from 0.0.0 before 4.3.9...
CVE-2025-3901: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal Bootstrap Site Alert allows Cross-Site Scripting XSS.This issue affects Bootstrap Site Alert: from 0.0.0 before 1.13.0, from 3.0.0 before 3.0.4...
PT-2025-17661 · Drupal · Drupal Search Api Solr
Name of the Vulnerable Software and Affected Versions: Drupal Search API Solr versions 0.0.0 through 4.3.8 Description: A Cross-Site Request Forgery CSRF issue affects the software, allowing unauthorized actions to be performed. This issue can be exploited to perform actions on behalf of another...
📄 Drupal 11.x-dev Path Disclosure
Drupal version 11.x-dev suffers from a path disclosure vulnerability. !/usr/bin/env python Exploit Title: Drupal 11.x-dev - Full Path Disclosure Date: 2025-04-16 Exploit Author: Milad Karimi Ex3ptionaL Contact: [email protected] Zone-H: www.zone-h.org/archive/notifier=Ex3ptionaL MiRROR-H:...
Drupal 11.x-dev - Full Path Disclosure
!/usr/bin/env python Exploit Title: Drupal 11.x-dev - Full Path Disclosure Date: 2025-04-16 Exploit Author: Milad Karimi Ex3ptionaL Contact: [email protected] Zone-H: www.zone-h.org/archive/notifier=Ex3ptionaL MiRROR-H: https://mirror-h.org/search/hacker/49626/ Version: 11.x-dev CVE:...
CVE-2025-3735
Vulnerability in Drupal Panelizer obsolete.This issue affects Panelizer obsolete:...