CVE-2026-114535

Missing Authorization vulnerability in Drupal Swiper formatter allows Forceful Browsing. This issue affects Swiper formatter versions: from 0.0.0 to 2.1.2, from 3.0.1 to 3.1.0...

CVE-2026-114538

Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Bootstrap allows Cross-Site Scripting XSS. This issue affects Bootstrap versions: from 0.0.0 to 3.45.0...

CVE-2026-114537

Incorrect Authorization vulnerability in Drupal View Unpublished allows Forceful Browsing. This issue affects View Unpublished versions: from 0.0.0 to 1.5.0...

CVE-2026-114540

Incorrect Authorization vulnerability in Drupal Domain allows Forceful Browsing. This issue affects Domain versions: from 3.0.0 to 3.0.2...

CVE-2026-114533

Missing Authorization vulnerability in Drupal Ágora Transparency Theme allows Forceful Browsing. This issue affects Ágora Transparency Theme versions: from 0.0.0 to 1.2.3...

CVE-2026-114536

Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal USWDS Paragraph Components allows Stored XSS. This issue affects USWDS Paragraph Components versions: from 0.0.0 to 3.1.3...

CVE-2026-114539

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal DocCheck Basic allows Authentication Bypass. This issue affects DocCheck Basic versions: 7.x...

CVE-2026-114526

Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Black Hole allows Stored XSS. This issue affects Black Hole versions: from 0.0.0 to 1.26.0, from 2.0.0 to 2.0.1...

CVE-2026-114525

Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal ABC allows Stored XSS. This issue affects ABC versions: from 0.0.0 to 1.25.0, from 2.0.0 to 2.0.1...

CVE-2026-114528

Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Zero Point allows Stored XSS. This issue affects Zero Point versions: from 0.0.0 to 1.30.0, from 2.0.0 to 2.0.1...

CVE-2026-114527

Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal UI Icons allows Cross-Site Scripting XSS. This issue affects UI Icons versions: from 0.0.0 to 1.1.3, from 2.0.0 to 2.0.2...

CVE-2026-114532

Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal UI Icons allows Cross-Site Scripting XSS. This issue affects UI Icons versions: from 0.0.0 to 1.1.3, from 2.0.0 to 2.0.2...

CVE-2026-114530

Incorrect Authorization vulnerability in Drupal Dopup allows Forceful Browsing. This issue affects Dopup versions: from 0.0.0 to 1.0.7...

CVE-2026-114529

Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal CSV Field allows Stored XSS. This issue affects CSV Field versions: from 0.0.0 to 2.0.10, from 3.0.0 to 3.0.7...

CVE-2026-114531

Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Swiper formatter allows Stored XSS. This issue affects Swiper formatter versions: from 0.0.0 to 2.1.2, from 3.0.1 to 3.1.0...

CVE-2026-114524

Privilege Defined With Unsafe Actions vulnerability in Drupal Custom Formatters allows Privilege Escalation. This issue affects Custom Formatters versions: from 0.0.0 to 4.2.1...

CVE-2026-114523

Improper Neutralization of Special Elements used in an OS Command "OS Command Injection" vulnerability in Drupal Ffmpeg Image Toolkit allows OS Command Injection. This issue affects Ffmpeg Image Toolkit versions: from 0.0.0 to 1.0.3...

CVE-2026-108515

Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Drupal core allows Cross-Site Scripting XSS. This issue affects Drupal core versions: from 8.9.0 to 10.6.19, from 11.0.0 to 11.3.19, from 11.4.0 to 11.4.10, from 12.0.0-alpha1 to 12.0.0-beta...

CVE-2026-108514

Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Drupal core allows Cross-Site Scripting XSS. This issue affects Drupal core versions: from 10.3.0 to 10.6.19, from 11.0.0 to 11.3.19, from 11.4.0 to 11.4.10, from 12.0.0-alpha1 to 12.0.0-bet...

CVE-2026-108099

Use of Externally-Controlled Input to Select Classes or Code 'Unsafe Reflection' vulnerability in Drupal Entity List allows Reflection Injection. This issue affects Entity List versions: from 0.0.0 to 3.0.10...