Quick Edit - Moderately critical - Cross-site Scripting - SA-CONTRIB-2026-009

This module allows content to be edited in-place. The module doesn't sufficiently sanitize certain image-related values during the editing process leading to a persistent Cross-site Scripting XSS vulnerability. This vulnerability is mitigated by the fact that an attacker must have permission to...

EUVD-2015-6690

Malware in sbrugna...

EUVD-2022-0877

Malicious code in bioql PyPI...

CVE-2015-6753

Multiple cross-site scripting XSS vulnerabilities in the Quick Edit module 7.x-1.x before 7.x-1.2 for Drupal allow remote authenticated users with certain permissions to inject arbitrary web script or HTML via an 1 entity title, related to in-place editing, or a 2 node title...

BIT-DRUPAL-2022-25270

The Quick Edit module does not properly check entity access in some circumstances. This could result in users with the "access in-place editing" permission viewing some content they are are not authorized to access. Sites are only affected if the QuickEdit module which comes with the Standard...

Drupal 9.3.x < 9.3.6 Multiple Vulnerabilities

According to its self-reported version, the instance of Drupal running on the remote web server is 7.x prior to 7.88, 9.2.x prior to 9.2.13, or 9.3.x prior to 9.3.6. It is, therefore, affected by multiple vulnerabilities: - The Quick Edit module does not properly check entity access in some...

CVE-2022-25270

The Quick Edit module does not properly check entity access in some circumstances. This could result in users with the "access in-place editing" permission viewing some content they are are not authorized to access. Sites are only affected if the QuickEdit module which comes with the Standard...

CVE-2022-25270

The Quick Edit module does not properly check entity access in some circumstances. This could result in users with the "access in-place editing" permission viewing some content they are are not authorized to access. Sites are only affected if the QuickEdit module which comes with the Standard...

Drupal 访问控制错误漏洞

Drupal is an open source content management system developed in the PHP language by the Drupal community. An access control error vulnerability exists in Drupal that stems from the Quick Edit module failing to properly check for entity access under certain circumstances. This could cause a user...

CVE-2022-25270

CVE-2022-25270 describes an information-disclosure issue in Drupal’s Quick Edit/QuickEdit module: under certain conditions, users with the “access in-place editing” permission may view content they are not authorized to access. The core detail in the provided documents is that the vulnerability a...

PT-2022-1768 · Drupal +2 · Drupal +2

Name of the Vulnerable Software and Affected Versions: Drupal affected versions not specified Description: The issue is related to the Quick Edit module in the Drupal content management system, which does not properly check entity access in some circumstances. This could result in users with the...

Drupal core - Moderately critical - Information disclosure - SA-CORE-2022-004

The Quick Edit module does not properly check entity access in some circumstances. This could result in users with the "access in-place editing" permission viewing some content they are are not authorized to access. Sites are only affected if the QuickEdit module which comes with the Standard...

Cross-site Scripting (XSS)

Drupal is vulnerable to cross-site scripting XSS attacks. When the quick edit module is enabled, a malicious user can inject and execute arbitrary Javascript through the Title field...