Lucene search
K

7 matches found

RedhatCVE
RedhatCVE
added 2026/03/26 5:1 p.m.3 views

CVE-2026-2348

Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Quick Edit allows Cross-Site Scripting XSS.This issue affects Quick Edit: from 0.0.0 before 1.0.5, from 2.0.0 before 2.0.1...

5.4CVSS5.8AI score0.00041EPSS
Exploits0References1
EUVD
EUVD
added 2026/03/25 6:31 p.m.2 views

EUVD-2026-15451

Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Quick Edit allows Cross-Site Scripting XSS.This issue affects Quick Edit: from 0.0.0 before 1.0.5, from 2.0.0 before 2.0.1...

6.1CVSS5.8AI score0.00041EPSS
Exploits0References2
NVD
NVD
added 2026/03/25 4:16 p.m.2 views

CVE-2026-2348

Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Quick Edit allows Cross-Site Scripting XSS.This issue affects Quick Edit: from 0.0.0 before 1.0.5, from 2.0.0 before 2.0.1...

5.4CVSS0.00041EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/03/25 3:20 p.m.18 views

CVE-2026-2348 Quick Edit - Moderately critical - Cross-site Scripting - SA-CONTRIB-2026-009

Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Quick Edit allows Cross-Site Scripting XSS.This issue affects Quick Edit: from 0.0.0 before 1.0.5, from 2.0.0 before 2.0.1...

0.00041EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/03/25 12:0 a.m.3 views

Drupal Quick Edit 安全漏洞

Drupal Quick Edit is a content management system module provided by the Drupal company that enables quick editing and immediate modification of page content. Versions of Drupal Quick Edit prior to 1.0.5 and 2.0.1 contained security vulnerabilities, which were due to improper input handling and...

5.4CVSS5.6AI score0.00041EPSS
Exploits0References1
OSV
OSV
added 2022/02/16 5:7 p.m.1 views

DRUPAL-CONTRIB-2022-025

This advisory addresses a similar issue to Drupal core - Moderately critical - Information disclosure - SA-CORE-2022-004. The Quick Edit module does not properly check entity access in some circumstances. This could result in users with the "access in-place editing" permission viewing some conten...

6.5AI score
Exploits0References1
CNVD
CNVD
added 2015/09/02 12:0 a.m.1 views

Drupal Quick Edit Module Cross-Site Scripting Vulnerability

Drupal is a free, open-source content management system developed in the PHP language and maintained by the Drupal community. A cross-site scripting vulnerability exists in the Drupal Quick Edit module in versions 7.x-1.x prior to 7.x-1.2. A remote attacker can exploit this vulnerability to injec...

3.5CVSS6AI score0.0014EPSS
Exploits0References1
Rows per page
Query Builder