44 matches found
CVE-2026-107306
Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Menu Link Attributes allows Stored XSS. This issue affects Menu Link Attributes versions: from 0.0.0 to 1.8.0...
CVE-2026-107306
The Drupal Menu Link Attributes module (versions 0.0.0 to 1.8.0 ) is vulnerable to Stored Cross-site Scripting (XSS) due to insufficient sanitization of HTML attributes applied to menu link container elements (such as ). Practical exploitation requires a high level of privilege: an attacker must ...
EUVD-2026-113566
Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Menu Link Attributes allows Stored XSS. This issue affects Menu Link Attributes versions: from 0.0.0 to 1.8.0...
CVE-2026-107306 Menu Link Attributes - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-209
Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Menu Link Attributes allows Stored XSS. This issue affects Menu Link Attributes versions: from 0.0.0 to 1.8.0...
CVE-2026-107306 Menu Link Attributes - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-209
Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Menu Link Attributes allows Stored XSS. This issue affects Menu Link Attributes versions: from 0.0.0 to 1.8.0...
CVE-2026-107306: Drupal Menu Link Attributes: Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Menu Link…
Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Menu Link Attributes allows Stored XSS. This issue affects Menu Link Attributes versions: from 0.0.0 to 1.8.0...
DRUPAL-CONTRIB-2026-224
The ABC theme provides configurable layouts and visual styling for Drupal websites, including support for Font Awesome icons in navigation menus. The theme does not sufficiently sanitize menu link titles before inserting them into HTML class attributes. This vulnerability is mitigated by the...
DRUPAL-CONTRIB-2026-223
The Black Hole theme provides configurable layouts and visual styling for Drupal websites, including support for Font Awesome icons in navigation menus. The theme does not sufficiently sanitize menu link titles before inserting them into HTML class attributes. This vulnerability is mitigated by t...
DRUPAL-CONTRIB-2026-222
The ZeroPoint theme provides configurable layouts and visual styling for Drupal websites, including support for Font Awesome icons in navigation menus. The theme does not sufficiently sanitize menu link titles before inserting them into HTML class attributes. This vulnerability is mitigated by th...
Zero Point - Critical - Cross-site scripting - SA-CONTRIB-2026-222
The ZeroPoint theme provides configurable layouts and visual styling for Drupal websites, including support for Font Awesome icons in navigation menus. The theme does not sufficiently sanitize menu link titles before inserting them into HTML class attributes. This vulnerability is mitigated by th...
PT-2026-120900
The ABC theme provides configurable layouts and visual styling for Drupal websites, including support for Font Awesome icons in navigation menus. The theme does not sufficiently sanitize menu link titles before inserting them into HTML class attributes. This vulnerability is mitigated by the...
PT-2026-120901
The Black Hole theme provides configurable layouts and visual styling for Drupal websites, including support for Font Awesome icons in navigation menus. The theme does not sufficiently sanitize menu link titles before inserting them into HTML class attributes. This vulnerability is mitigated by t...
ABC - Critical - Cross-site scripting - SA-CONTRIB-2026-224
The ABC theme provides configurable layouts and visual styling for Drupal websites, including support for Font Awesome icons in navigation menus. The theme does not sufficiently sanitize menu link titles before inserting them into HTML class attributes. This vulnerability is mitigated by the...
PT-2026-120903
The ZeroPoint theme provides configurable layouts and visual styling for Drupal websites, including support for Font Awesome icons in navigation menus. The theme does not sufficiently sanitize menu link titles before inserting them into HTML class attributes. This vulnerability is mitigated by th...
Black Hole - Critical - Cross-site scripting - SA-CONTRIB-2026-223
The Black Hole theme provides configurable layouts and visual styling for Drupal websites, including support for Font Awesome icons in navigation menus. The theme does not sufficiently sanitize menu link titles before inserting them into HTML class attributes. This vulnerability is mitigated by t...
drupal-htmx-attr
abraxaslabs.tech · github.com/abraxas ·&...
DRUPAL-CONTRIB-2026-209
This module enables you to add HTML attributes to menu links and their container elements . The module doesn't sufficiently sanitize the attributes it applies to menu link container elements. This vulnerability is mitigated by the fact that an attacker must have a role with the permissions...
PT-2026-107760
This module enables you to add HTML attributes to menu links and their container elements . The module doesn't sufficiently sanitize the attributes it applies to menu link container elements. This vulnerability is mitigated by the fact that an attacker must have a role with the permissions...
Menu Link Attributes - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-209
This module enables you to add HTML attributes to menu links and their container elements . The module doesn't sufficiently sanitize the attributes it applies to menu link container elements. This vulnerability is mitigated by the fact that an attacker must have a role with the permissions...