DRUPAL-CONTRIB-2026-140

This module enables you to manage content deletion and provides reports for identifying orphaned content. The module doesn't sufficiently sanitize node titles when displaying the orphaned nodes report. This leads to a persistent cross-site scripting vulnerability XSS. This vulnerability is...

SafeDelete - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-140

This module enables you to manage content deletion and provides reports for identifying orphaned content. The module doesn't sufficiently sanitize node titles when displaying the orphaned nodes report. This leads to a persistent cross-site scripting vulnerability XSS. This vulnerability is...

PT-2026-89241

Name of the Vulnerable Software and Affected Versions Drupal SafeDelete versions 0.0.0 through 1.0.88 Description Stored cross-site scripting XSS occurs because the module does not sufficiently sanitize node titles when displaying the orphaned nodes report. This allows an attacker with permission...