14785 matches found
CVE-2026-16638 Media Folders - Moderately critical - Cross site scripting - SA-CONTRIB-2026-080
Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Media Folders allows Stored XSS. This issue affects Media Folders versions: from 0.0.0 to 1.0.8...
CVE-2026-16638 Media Folders - Moderately critical - Cross site scripting - SA-CONTRIB-2026-080
Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Media Folders allows Stored XSS. This issue affects Media Folders versions: from 0.0.0 to 1.0.8...
CVE-2026-16639 Internationalization Single Sign-On - Critical - Access bypass - SA-CONTRIB-2026-081
Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Internationalization Single Sign-On allows Authentication Bypass. This issue affects Internationalization Single Sign-On versions: from 0.0.0 to 1.8.0...
CVE-2026-16639
The Drupal Internationalization Single Sign-On module (versions 0.0.0 through 1.8.0 ) is vulnerable to an authentication bypass caused by insufficient validation of a short-lived token. In multilingual website scenarios using different domain names per language, an attacker can bypass access cont...
CVE-2026-16639 Internationalization Single Sign-On - Critical - Access bypass - SA-CONTRIB-2026-081
Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Internationalization Single Sign-On allows Authentication Bypass. This issue affects Internationalization Single Sign-On versions: from 0.0.0 to 1.8.0...
CVE-2026-16640 Search API Autocomplete - Moderately critical - Cross-site Scripting - SA-CONTRIB-2026-082
Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Search API Autocomplete allows Reflected XSS. This issue affects Search API Autocomplete versions: from 0.0.0 to 1.12.0...
CVE-2026-16640
The Drupal Search API Autocomplete module, versions 0.0.0 through 1.12.0 , is vulnerable to Reflected Cross-site Scripting (XSS) due to improper neutralization of input during web page generation. The root cause is a test script accessible to anonymous users that fails to sufficiently validate us...
CVE-2026-16640 Search API Autocomplete - Moderately critical - Cross-site Scripting - SA-CONTRIB-2026-082
Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Search API Autocomplete allows Reflected XSS. This issue affects Search API Autocomplete versions: from 0.0.0 to 1.12.0...
CVE-2026-16646
A vulnerability exists in the Drupal PanKM project, affecting all versions (. ). The project has been marked as unsupported by the security team due to a known security issue that the maintainer has not fixed. Technical details regarding the root cause, specific impact, or available remediation a...
CVE-2026-16646 PanKM - Critical - Unsupported - SA-CONTRIB-2026-083
Vulnerability in Drupal PanKM. This issue affects PanKM versions:...
CVE-2026-16646 PanKM - Critical - Unsupported - SA-CONTRIB-2026-083
Vulnerability in Drupal PanKM. This issue affects PanKM versions:...
CVE-2026-16641 Commerce Elavon - Critical - Unsupported - SA-CONTRIB-2026-084
Vulnerability in Drupal Commerce Elavon. This issue affects Commerce Elavon versions:...
CVE-2026-16641 Commerce Elavon - Critical - Unsupported - SA-CONTRIB-2026-084
Vulnerability in Drupal Commerce Elavon. This issue affects Commerce Elavon versions:...
CVE-2026-16641
A security issue exists in Drupal Commerce Elavon (affected versions . ), involving Improper Input Validation . The project has been marked as unsupported by the security team because a known security flaw remains unaddressed by the maintainer. No information regarding a newer version containing ...
CVE-2026-16642
Drupal Email Login OTP (a Drupal contrib module) has a critical-severity security issue affecting all versions (. ). The Drupal security team has marked the project unsupported , meaning the maintainer has not provided a fix. The CNA-assigned CVSS 3.1 score is 5.7 (MEDIUM) with a vector requiring...
CVE-2026-16642 Email Login OTP - Critical - Unsupported - SA-CONTRIB-2026-085
Vulnerability in Drupal Email Login OTP. This issue affects Email Login OTP versions:...
CVE-2026-16642 Email Login OTP - Critical - Unsupported - SA-CONTRIB-2026-085
Vulnerability in Drupal Email Login OTP. This issue affects Email Login OTP versions:...
CVE-2026-16643 Lunr exposed filters - Critical - Unsupported - SA-CONTRIB-2026-086
Vulnerability in Drupal Lunr exposed filters. This issue affects Lunr exposed filters versions:...
CVE-2026-16643
A vulnerability exists in the Drupal Lunr exposed filters component (versions 所有 versions ). While Rapid7 identifies the root cause as Improper Input Validation , the project has been marked as unsupported by the Drupal security team due to a known security issue that remains unfixed by the maint...