Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-155
CVE-2026-96361
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Webform all
#advisory
共收录 22948 条相关情报。
← 返回所有主题Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-158
CVE-2026-96358
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Webform all
Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-159
CVE-2026-96359
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Webform all
Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-160
CVE-2026-96362
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Webform all
Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-161
CVE-2026-96363
Privilege Defined With Unsafe Actions vulnerability in Drupal Webform allows Stored XSS. This issue affects Webform vers
Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-162
CVE-2026-96367
Privilege Defined With Unsafe Actions vulnerability in Drupal Webform allows Stored XSS. This issue affects Webform vers
Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-163
CVE-2026-96368
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Webform all
Webform - Moderately critical - Access bypass, Server-side request forgery - SA-CONTRIB-2026-164
CVE-2026-96370
Incorrect Authorization vulnerability in Drupal Webform allows Server Side Request Forgery. This issue affects Webform v
Webform - Less critical - Access bypass - SA-CONTRIB-2026-165
CVE-2026-96369
Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Webform allows Exploiting Incorrectly
Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-166
CVE-2026-96371
Privilege Defined With Unsafe Actions vulnerability in Drupal Webform allows Stored XSS. This issue affects Webform vers
Webform - Moderately critical - Access bypass - SA-CONTRIB-2026-167
CVE-2026-96372
Insufficient Granularity of Access Control vulnerability in Drupal Webform allows Forceful Browsing. This issue affects
Webform - Moderately critical - Access bypass - SA-CONTRIB-2026-168
CVE-2026-96373
Incorrect Authorization vulnerability in Drupal Webform allows Forceful Browsing. This issue affects Webform versions: f
Webform - Moderately critical - Access bypass - SA-CONTRIB-2026-169
CVE-2026-96366
Incorrect Authorization vulnerability in Drupal Webform allows Forceful Browsing. This issue affects Webform versions: f
Webform - Less critical - Denial of service - SA-CONTRIB-2026-170
CVE-2026-96365
Allocation of Resources Without Limits or Throttling vulnerability in Drupal Webform allows Excessive Allocation. This i
Webform - Moderately critical - Access bypass - SA-CONTRIB-2026-171
CVE-2026-96364
Improper Control of Interaction Frequency vulnerability in Drupal Webform allows Functionality Misuse. This issue affect
Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-172
CVE-2026-96357
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Webform all
Webform - Moderately critical - Access bypass - SA-CONTRIB-2026-174
CVE-2026-96356
Incorrect Authorization vulnerability in Drupal Webform allows Forceful Browsing. This issue affects Webform versions: f
Webform - Critical - Remote Code Execution - SA-CONTRIB-2026-175
CVE-2026-96355
Improper Neutralization of Special Elements Used in a Template Engine vulnerability in Drupal Webform allows Code Inject
Cloud - Critical - Remote code execution - SA-CONTRIB-2026-176
CVE-2026-96375
Improper Certificate Validation vulnerability in Drupal Cloud allows Adversary in the Middle (AiTM). This issue affects
Cloud - Critical - Remote code execution - SA-CONTRIB-2026-177
CVE-2026-96376
Improper Neutralization of Special Elements used in an OS Command ("OS Command Injection") vulnerability in Drupal Cloud