Security

Security

Moderately Critical XSS Vulnerability in jQuery UI Datepicker

Share

× SHARE

A Drupal security advisory was announced against a moderately critical XSS vulnerability (SA-CONTRIB-2022-004) in the vendor library, jQuery UI, on January 19th, 2022 ...more

Read Full Content
Security

Moderately Critical XSS Vulnerability in WYSIWYG Drupal 7

Share

× SHARE

The Drupal security team announced a moderately critical cross site scripting (XSS) vulnerability SA-CONTRIB-2022-003 in WYSIWYG Drupal 7 on 2022, January 5th. ...more

Read Full Content
Security

Moderately Critical Access bypass Vulnerability in Simple OAuth & OpenID Connect

Share

× SHARE

Drupal security team announced a moderately critical access bypass vulnerability SA-CONTRIB-2022-002 in Simple OAuth (OAuth2) & OpenID Connect on 2022, January 5th. ...more

Read Full Content
Security

Critical Access bypass Vulnerability in Super Login Drupal 8

Share

× SHARE

The Drupal security team has announced a critical access bypass vulnerability SA-CONTRIB-2022-001 in the Super Login module in Drupal 8, posted on 2022, January 5th. ...more

Read Full Content
Security

Moderately Critical Access bypass Vulnerability in Mail Login

Share

× SHARE

The Drupal security team has posted a moderately critical access bypass vulnerability in Mail Login (SA-CONTRIB-2021-047), dated December 22nd, 2021 ...more

Read Full Content
Security

Critical XSS & Access Bypass Vulnerability in Webform

Share

× SHARE

The Drupal security team has issued on December 8th, 2021 critical cross-site scripting (XSS) and access bypass vulnerability for webform (SA-CONTRIB-2021-045). ...more

Read Full Content
Security

Critical XSS Vulnerability on Search API Pages in Drupal 7

Share

× SHARE

The Drupal security team has posted a CRITICAL cross-site scripting (XSS) vulnerability on Search API pages, dated December 8th, 2021. ...more

Read Full Content
Security

Moderately Critical XSS Vulnerability Discovered in CKEditor

Share

× SHARE

CKEditor has released a security update SA- Core-2021-011 that impacts Drupal. The issue, dated November 17, 2021, is classified as a moderately critical cross-site scripting (XSS) vulnerability. ...more

Read Full Content
Security

Backport Server Configuration Code to Drupal 7

Share

× SHARE

Backport of the Drupal 8 security fix though not required in Drupal 7 it would mitigate the issue when using vulnerable codes or libraries. ...more

Read Full Content
Security

Drupal Releases Updates Against CKEditor Vulnerabilities

Share

× SHARE

Drupal recently released security updates due to the vulnerabilities in a third-party text editor bundled with it called CKEditor. ...more

Read Full Content