Vulnerabilities in Drupal
576 resultsCVE-2026-81163MEDIUMMedia Library Importer - Moderately critical - Access bypass - SA-CONTRIB-2026-129EPSS 0.3%CVE-2025-5682MEDIUMKlaro Cookie & Consent Management - Moderately critical - Cross-site Scripting - SA-CONTRIB-2025-080EPSS 0.3%CVE-2025-7716MEDIUMReal-time SEO for Drupal - Moderately critical - Cross-site Scripting - SA-CONTRIB-2025-091EPSS 0.3%CVE-2026-3526MEDIUMFile Access Fix (deprecated) - Moderately critical - Access bypass - SA-CONTRIB-2026-021EPSS 0.3%CVE-2025-48918HIGHSimple Klaro - Moderately critical - Cross Site Scripting - SA-CONTRIB-2025-071EPSS 0.3%CVE-2024-13309MEDIUMLogin Disable - Critical - Access bypass - SA-CONTRIB-2024-073EPSS 0.3%CVE-2024-13308LOWBrowser Back Button - Moderately critical - Cross site scripting - SA-CONTRIB-2024-072EPSS 0.3%CVE-2025-8996MEDIUMLayout Builder Advanced Permissions - Moderately critical - Access bypass - SA-CONTRIB-2025-097EPSS 0.3%CVE-2025-31697MEDIUMFormatter Suite - Moderately critical - Cross site scripting - SA-CONTRIB-2025-026EPSS 0.3%CVE-2025-31696MEDIUMRapiDoc OAS Field Formatter - Moderately critical - Cross site scripting - SA-CONTRIB-2025-025EPSS 0.3%CVE-2025-31687MEDIUMSpamSpan filter - Moderately critical - Cross Site Scripting - SA-CONTRIB-2025-016EPSS 0.3%CVE-2025-31695MEDIUMLink field display mode formatter - Moderately critical - Cross site scripting - SA-CONTRIB-2025-024EPSS 0.3%CVE-2026-107312MEDIUMExamples for Developers - Less critical - Allocation of resources without limits or throttling - SA-CONTRIB-2026-215EPSS 0.3%CVE-2025-31679MEDIUMIgnition Error Pages - Critical - Cross Site Scripting - SA-CONTRIB-2025-007EPSS 0.3%CVE-2025-48012MEDIUMOne Time Password - Moderately critical - Access bypass - SA-CONTRIB-2025-063EPSS 0.3%CVE-2026-87954MEDIUMTaxonomy Term Glossary - Critical - Access bypass - SA-CONTRIB-2026-152EPSS 0.3%CVE-2025-48010MEDIUMOne Time Password - Moderately critical - Access bypass - SA-CONTRIB-2025-061EPSS 0.3%CVE-2025-7715MEDIUMBlock Attributes - Moderately critical - Cross-site Scripting - SA-CONTRIB-2025-090EPSS 0.3%CVE-2020-13673—The Entity Embed module provides a filter to allow embedding entities in content fields. In certain circumstances, the filter could allow anEPSS 0.3%CVE-2025-3900MEDIUMColorbox - Moderately critical - Cross Site Scripting - SA-CONTRIB-2025-041EPSS 0.3%