Security

Security

Moderately Critical Improper Input Validation in Drupal Core

Share

× SHARE

Drupal security team announced on February 16th, 2022, the moderately critical improper input validation vulnerability in Drupal Core, SA-CORE-2022-003. ...more

Read Full Content
Security

Less Critical XSS Vulnerability in Custom Breadcrumbs Module

Share

× SHARE

Drupal Security Team announced a Cross-Site Scripting (XSS) vulnerability SA-CONTRIB-2022-024 that has low criticality index in the Custom Breadcrumbs Module on February 9th, 2022. ...more

Read Full Content
Security

Moderately Critical Access Bypass Vulnerability in Fancy File Delete Module

Share

× SHARE

Drupal Security team announces a moderately critical access bypass vulnerability SA-CONTRIB-2022-023 in the Fancy File Delete Module on February 9th 2022. ...more

Read Full Content
Security

Huge List of Critical but Unsupported Security Vulnerabilities in Contrib Modules!

Share

× SHARE

On January 25th, a whole list of security advisories for contributed module projects was posted by the Drupal Security team that are classified as Critical but Unsupported vulnerabilities. Read to find which ones! ...more

Read Full Content
Security

Moderately Critical XSS Vulnerability in Navbar in Drupal 7

Share

× SHARE

The Drupal Security Team announced a moderately critical Cross-site Scripting-SA-CONTRIB-2022-011 Vulnerability in Navbar module in Drupal 7on January 25th, 2022. ...more

Read Full Content
Security

Multiple Critical Vulnerabilities in the Private Taxonomy Terms Module!

Share

× SHARE

Critical Access bypass, Information Disclosure, and Multiple Vulnerabilities in the Private Taxonomy Terms module SA-CONTRIB-2022-014 was announced on January 26th, 2022 ...more

Read Full Content
Security

Moderately Critical XSS Vulnerability in jQuery UI Datepicker

Share

× SHARE

A Drupal security advisory was announced against a moderately critical XSS vulnerability (SA-CONTRIB-2022-004) in the vendor library, jQuery UI, on January 19th, 2022 ...more

Read Full Content
Security

Moderately Critical XSS Vulnerability in WYSIWYG Drupal 7

Share

× SHARE

The Drupal security team announced a moderately critical cross site scripting (XSS) vulnerability SA-CONTRIB-2022-003 in WYSIWYG Drupal 7 on 2022, January 5th. ...more

Read Full Content
Security

Moderately Critical Access bypass Vulnerability in Simple OAuth & OpenID Connect

Share

× SHARE

Drupal security team announced a moderately critical access bypass vulnerability SA-CONTRIB-2022-002 in Simple OAuth (OAuth2) & OpenID Connect on 2022, January 5th. ...more

Read Full Content
Security

Critical Access bypass Vulnerability in Super Login Drupal 8

Share

× SHARE

The Drupal security team has announced a critical access bypass vulnerability SA-CONTRIB-2022-001 in the Super Login module in Drupal 8, posted on 2022, January 5th. ...more

Read Full Content
Security

Moderately Critical Access bypass Vulnerability in Mail Login

Share

× SHARE

The Drupal security team has posted a moderately critical access bypass vulnerability in Mail Login (SA-CONTRIB-2021-047), dated December 22nd, 2021 ...more

Read Full Content
Security

Critical XSS & Access Bypass Vulnerability in Webform

Share

× SHARE

The Drupal security team has issued on December 8th, 2021 critical cross-site scripting (XSS) and access bypass vulnerability for webform (SA-CONTRIB-2021-045). ...more

Read Full Content