CVE-2010-1074

CVE-2010-1074 is a Cross-site scripting (XSS) vulnerability in the Drupal Currency Exchange module prior to 6.x-1.2. The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to watchdog logging. Affected product: Drupal Currency Exchange module (ve...

CVE-2025-10930

The CVE CVE-2025-10930 concerns Drupal Currency, a Drupal contributed module that handles currency display/conversion. The root cause is a Cross-Site Request Forgery (CSRF) vulnerability, allowing an attacker to forge actions for authenticated users. Affected versions are prior to 3.5.0. Conseque...