Drupal Admin LTE theme 授权问题漏洞

The Drupal Admin LTE theme is an AdminLTE based backend administration theme for the Drupal community. A security vulnerability exists in Drupal Admin LTE theme, which stems from the presence of a known security issue, where an attack requires administrator privileges and affects the...

PT-2025-13867 · Drupal · Drupal Formatter Suite

Name of the Vulnerable Software and Affected Versions: Drupal Formatter Suite versions 0.0.0 through 2.0.x Description: The issue is related to improper neutralization of input during web page generation, which allows Cross-Site Scripting XSS. This can lead to the execution of malicious scripts o...

Drupal Material Admin 安全漏洞

Drupal Material Admin is a Drupal community admin theme for the Drupal backend based on the Google Material Design style, providing a modern and intuitive user interface. A security vulnerability exists in Drupal Material Admin. The vulnerability stems from a known security issue where an attack...

Drupal Formatter Suite 跨站脚本漏洞

The Drupal Formatter Suite is a collection of modules from the Drupal community designed to provide a flexible set of formatting tools for Drupal. A cross-site scripting vulnerability exists in Drupal Formatter Suite versions prior to 2.1.0 that stems from improper input neutralization and could...

Drupal Link field display mode formatter 跨站脚本漏洞

The Drupal Link field display mode formatter is a Drupal community module used to provide custom display modes for Drupal link fields. A cross-site scripting vulnerability exists in Drupal Link field display mode formatter versions prior to 1.6.0, which stems from improper input neutralization an...

Drupal Ignition Error Pages 跨站脚本漏洞

Drupal Ignition Error Pages is a module of the Drupal community that provides custom error pages e.g. 404, 500, etc. to improve the user experience. A cross-site scripting vulnerability exists in Drupal Ignition Error Pages versions prior to 1.0.4, which stems from improper input neutralization a...

PT-2025-13843 · Drupal · Ignition Error Pages

Name of the Vulnerable Software and Affected Versions: Ignition Error Pages versions 0.0.0 through 1.0.3 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS, in Drupal Ignition Error Pages. This allows for...

PT-2025-13844 · Drupal +1 · Drupal +1

Name of the Vulnerable Software and Affected Versions: Matomo Analytics versions 0.0.0 through 1.23.0 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability in Drupal Matomo Analytics, allowing unauthorized actions to be performed on behalf of a user. Recommendations: For...

PT-2025-13842 · Drupal · Drupal Ai

Name of the Vulnerable Software and Affected Versions: Drupal AI Artificial Intelligence versions 0.0.0 through 1.0.2 Description: The issue is related to a Missing Authorization vulnerability, which allows Forceful Browsing in Drupal AI Artificial Intelligence. Recommendations: For versions 0.0....

Drupal Authenticator Login 安全漏洞

Drupal Authenticator Login is a Drupal community authentication login module or feature for Drupal. A security vulnerability exists in Drupal Authenticator Login versions prior to 2.0.6, which stems from a lack of authorization and could lead to forced browsing...

PT-2025-13845 · Drupal · Drupal Authenticator Login

Name of the Vulnerable Software and Affected Versions: Drupal Authenticator Login versions 0.0.0 through 2.0.5 Description: The issue is related to a Missing Authorization vulnerability in Drupal Authenticator Login, which allows Forceful Browsing. Recommendations: For versions 0.0.0 through 2.0....

Drupal core 安全漏洞

Drupal core is a free, open source content management system developed in PHP by the Drupal community. A security vulnerability exists in Drupal core that stems from improper authorization and could lead to forced browsing...

PT-2025-13837 · Drupal · Drupal

Name of the Vulnerable Software and Affected Versions: Drupal core versions 8.0.0 through 10.3.12 Drupal core versions 10.4.0 through 10.4.2 Drupal core versions 11.0.0 through 11.0.11 Drupal core versions 11.1.0 through 11.1.2 Description: The issue is related to an Incorrect Authorization...

PT-2025-13841 · Drupal · Drupal Ai

Name of the Vulnerable Software and Affected Versions: Drupal AI Artificial Intelligence versions 1.0.0 through 1.0.1 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to perform actions on a user's behalf without their consent. This is a type of...

Drupal Cache Utility 跨站请求伪造漏洞

Drupal Cache Utility is a tool module for the Drupal community to manage and optimize the Drupal cache. A cross-site request forgery vulnerability exists in Drupal Cache Utility versions prior to 1.2.1 that stems from cross-site request forgery...

Drupal core 安全漏洞

Drupal core is a free, open source content management system developed in PHP by the Drupal community. A security vulnerability exists in Drupal core that stems from improper modification of dynamic object properties, which could lead to object injection...

Drupal SpamSpan filter 跨站脚本漏洞

Drupal SpamSpan filter is a Drupal community module for spam prevention. A cross-site scripting vulnerability exists in Drupal SpamSpan filter versions prior to 3.2.1, which stems from improper input neutralization and could lead to cross-site scripting attacks...

PT-2025-13847 · Drupal · Drupal Google Tag

Name of the Vulnerable Software and Affected Versions: Drupal Google Tag versions 0.0.0 through 1.7.x Drupal Google Tag versions 2.0.0 through 2.0.7 Description: A Cross-Site Request Forgery CSRF issue affects the Drupal Google Tag module, allowing unauthorized actions to be performed on behalf o...

PT-2025-13846 · Drupal · Drupal Google Tag

Name of the Vulnerable Software and Affected Versions: Drupal Google Tag versions 0.0.0 through 1.7.x Drupal Google Tag versions 2.0.0 through 2.0.7 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allow...

PT-2025-13859 · Drupal · Drupal Profile Private

Name of the Vulnerable Software and Affected Versions: Drupal Profile Private version . Description: The issue affects the private profile functionality. Recommendations: For version ., consider updating to a newer version that addresses this issue, if available. At the moment, there is no...