14277 matches found
Drupal Search API Solr module < 4.3.9 - Unauthenticated Cross Site Request Forgery (CSRF) vulnerability
Unauthenticated Cross Site Request Forgery CSRF vulnerability discovered by Pierre Rudloff prudloff in WordPress Module Search API Solr versions 4.3.9...
Drupal Bootstrap Site Alert module < 1.13.0,3.0.0-3.0.3 - Unauthenticated Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS vulnerability discovered by Mitch Portier arkener in WordPress Module Bootstrap Site Alert versions 1.13.0,3.0.0-3.0.3...
📄 Drupal 11.x-dev Path Disclosure
Drupal version 11.x-dev suffers from a path disclosure vulnerability. !/usr/bin/env python Exploit Title: Drupal 11.x-dev - Full Path Disclosure Date: 2025-04-16 Exploit Author: Milad Karimi Ex3ptionaL Contact: [email protected] Zone-H: www.zone-h.org/archive/notifier=Ex3ptionaL MiRROR-H:...
Drupal 11.x-dev - Full Path Disclosure
!/usr/bin/env python Exploit Title: Drupal 11.x-dev - Full Path Disclosure Date: 2025-04-16 Exploit Author: Milad Karimi Ex3ptionaL Contact: [email protected] Zone-H: www.zone-h.org/archive/notifier=Ex3ptionaL MiRROR-H: https://mirror-h.org/search/hacker/49626/ Version: 11.x-dev CVE:...
CVE-2025-3738
Vulnerability in Drupal Google Optimize.This issue affects Google Optimize:...
CVE-2025-3735
Vulnerability in Drupal Panelizer obsolete.This issue affects Panelizer obsolete:...
CVE-2025-3739
Vulnerability in Drupal Drupal 8 Google Optimize Hide Page.This issue affects Drupal 8 Google Optimize Hide Page:...
CVE-2025-3736
Vulnerability in Drupal Simple GTM.This issue affects Simple GTM:...
CVE-2025-3737
Vulnerability in Drupal Google Maps: Store Locator.This issue affects Google Maps: Store Locator:...
CVE-2025-3733
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal baguetteBox.Js allows Cross-Site Scripting XSS.This issue affects baguetteBox.Js: from 0.0.0 before 2.0.4, from 3.0.0 before 3.0.1...
CVE-2025-3734
Allocation of Resources Without Limits or Throttling vulnerability in Drupal Stage File Proxy allows Flooding.This issue affects Stage File Proxy: from 0.0.0 before 3.1.5...
CVE-2025-3739 Drupal 8 Google Optimize Hide Page - Critical - Unsupported - SA-CONTRIB-2025-040
Vulnerability in Drupal Drupal 8 Google Optimize Hide Page.This issue affects Drupal 8 Google Optimize Hide Page:...
CVE-2025-3739 Drupal 8 Google Optimize Hide Page - Critical - Unsupported - SA-CONTRIB-2025-040
Vulnerability in Drupal Drupal 8 Google Optimize Hide Page.This issue affects Drupal 8 Google Optimize Hide Page:...
CVE-2025-3739
CVE-2025-3739 : A vulnerability in Drupal 8 Google Optimize Hide Page affects the Drupal 8 Google Optimize Hide Page module. The CVSSv3.1 metrics indicate a network attack vector, high attack complexity, and that an attacker requires high privileges with no user interaction to achieve a Confident...
CVE-2025-3738 Google Optimize - Critical - Unsupported - SA-CONTRIB-2025-039
Vulnerability in Drupal Google Optimize.This issue affects Google Optimize:...
CVE-2025-3738 Google Optimize - Critical - Unsupported - SA-CONTRIB-2025-039
Vulnerability in Drupal Google Optimize.This issue affects Google Optimize:...
CVE-2025-3738
Technical details about CVE-2025-3738 are not publicly provided in the supplied documents. Monitor for updates from Drupal SA-Contrib-2025-039 and related advisories.
CVE-2025-3737
CVE-2025-3737 concerns the Drupal module Google Maps: Store Locator . Across the provided sources, the vulnerability is described as affecting the Store Locator component for Drupal Google Maps, with the SA-CONTRIB-2025-038 entry labeling the issue as critical and the project as unsupported. The ...