CVE-2024-13272

The Drupal Paragraphs table module is vulnerable to insufficient granularity of access control (CWE-1220), which can lead to content spoofing , access bypass , and information disclosure . The root cause stems from routes that do not sufficiently restrict access; for example, several routes only ...

CVE-2025-6677

The Drupal Paragraphs table module (versions 2.0.0 through 2.0.4 ) is vulnerable to Cross-Site Scripting (XSS) due to improper neutralization of input during web page generation. The module fails to sufficiently sanitize certain data attributes, allowing an attacker to inject malicious scripts. H...