8 matches found
CVE-2026-107264
Improper Neutralization of Special Elements Used in a Template Engine vulnerability in Drupal Inline Formatter Field allows Code Injection. This issue affects Inline Formatter Field versions: from 0.0.0 to 4.2.0...
EUVD-2026-113572
Improper Neutralization of Special Elements Used in a Template Engine vulnerability in Drupal Inline Formatter Field allows Code Injection. This issue affects Inline Formatter Field versions: from 0.0.0 to 4.2.0...
CVE-2026-107264 Inline Formatter Field - Moderately critical - Server-side template injection - SA-CONTRIB-2026-203
Improper Neutralization of Special Elements Used in a Template Engine vulnerability in Drupal Inline Formatter Field allows Code Injection. This issue affects Inline Formatter Field versions: from 0.0.0 to 4.2.0...
CVE-2026-107264
The Inline Formatter Field module for Drupal is vulnerable to a Server-side Template Injection (SSTI) . The root cause is the improper neutralization of special elements during template parsing, which allows attackers to render protected data or execute unsafe Twig commands . This issue affects v...
CVE-2026-107264 Inline Formatter Field - Moderately critical - Server-side template injection - SA-CONTRIB-2026-203
Improper Neutralization of Special Elements Used in a Template Engine vulnerability in Drupal Inline Formatter Field allows Code Injection. This issue affects Inline Formatter Field versions: from 0.0.0 to 4.2.0...
DRUPAL-CONTRIB-2026-203
The Inline Formatter Field module allows site builders to template and style entities with a field. This module does not properly protect against template injection when parsing, allowing users to render protected data or execute unsafe Twig commands...
Inline Formatter Field - Moderately critical - Server-side template injection - SA-CONTRIB-2026-203
The Inline Formatter Field module allows site builders to template and style entities with a field. This module does not properly protect against template injection when parsing, allowing users to render protected data or execute unsafe Twig commands...
PT-2026-107755
The Inline Formatter Field module allows site builders to template and style entities with a field. This module does not properly protect against template injection when parsing, allowing users to render protected data or execute unsafe Twig commands...