DRUPAL-CONTRIB-2020-014

This module enables you to build forms and surveys in Drupal. The module doesn't sufficiently filter user input under in the scenario when a webform is edited, namely the message related to character min/max counter does not undergo sufficient filtering and thus allows execution of JavaScript cod...

Drupal Webform Module Access Bypass Vulnerability

Drupal is a free, open-source content management system developed in the PHP language and maintained by the Drupal community. An access bypass vulnerability exists in Drupal Webform Module, which can be exploited by an attacker to bypass certain security mechanisms and perform unauthorized...

PT-2015-6556

Name of the Vulnerable Software and Affected Versions Drupal Webform module versions prior to 6.x-3.23 Drupal Webform module versions 7.x-3.x prior to 7.x-3.23 Drupal Webform module versions 7.x-4.x prior to 7.x-4.5 Description The issue allows remote authenticated users with certain permissions ...

PT-2014-8467

Name of the Vulnerable Software and Affected Versions Drupal Webform module versions 6.x-3.x through 6.x-3.19 Drupal Webform module versions 7.x-3.x through 7.x-3.19 Drupal Webform module versions 7.x-4.x through 7.x-4.0-beta1 Description A cross-site scripting XSS issue allows remote authenticat...

PT-2012-3424

Name of the Vulnerable Software and Affected Versions Drupal Webform module versions 6.x-3.x before 6.x-3.17 Drupal Webform module versions 7.x-3.x before 7.x-3.17 Description The issue affects the Webform module in Drupal, specifically in components/select.inc, when the "Select or other" module ...