Vulnerabilities in Drupal
576 resultsCVE-2025-3900MEDIUMColorbox - Moderately critical - Cross Site Scripting - SA-CONTRIB-2025-041EPSS 0.3%CVE-2026-5343HIGHSAML SSO - Service Provider - Critical - Authentication bypass - SA-CONTRIB-2026-031EPSS 0.3%CVE-2026-58588MEDIUMDrupal Canvas - Moderately critical - Improper validation - SA-CONTRIB-2026-066EPSS 0.3%CVE-2026-58587MEDIUMDrupal Canvas - Moderately critical - Improper validation - SA-CONTRIB-2026-065EPSS 0.3%CVE-2026-10770MEDIUMAnti-Spam by CleanTalk - Moderately critical - Cross site scripting - SA-CONTRIB-2026-042EPSS 0.3%CVE-2026-81159LOWCommerce CyberSource - Moderately critical - Insufficient input validation - SA-CONTRIB-2026-106EPSS 0.3%CVE-2026-81201MEDIUMMonster Menus - Moderately critical - Cross-site Scripting - SA-CONTRIB-2026-116EPSS 0.3%CVE-2026-3531MEDIUMOpenID Connect / OAuth client - Moderately critical - Access bypass - SA-CONTRIB-2026-026EPSS 0.3%CVE-2025-8362MEDIUMGoogleTag Manager - Moderately critical - Cross-site scripting - SA-CONTRIB-2025-094EPSS 0.3%CVE-2024-13301MEDIUMOAuth & OpenID Connect Single Sign On – SSO (OAuth/OIDC Client) - Critical - Cross Site Scripting - SA-CONTRIB-2024-067EPSS 0.3%CVE-2026-118556MEDIUMCommerce Shipping - Moderately critical - Access bypass - SA-CONTRIB-2026-261EPSS 0.3%CVE-2026-13231MEDIUMAdvanced Content Feedback (aka admin_feedback) - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-051EPSS 0.3%CVE-2026-81160MEDIUMSlick Carousel - Moderately critical - Cross Site Scripting - SA-CONTRIB-2026-117EPSS 0.3%CVE-2026-16638MEDIUMMedia Folders - Moderately critical - Cross site scripting - SA-CONTRIB-2026-080EPSS 0.3%CVE-2026-13234MEDIUMAI (Artificial Intelligence) - Moderately critical - Information Disclosure / Cross-site Scripting - SA-CONTRIB-2026-054EPSS 0.3%CVE-2026-3527MEDIUMAJAX Dashboard - Critical - Access bypass - SA-CONTRIB-2026-022EPSS 0.3%CVE-2026-16640MEDIUMSearch API Autocomplete - Moderately critical - Cross-site Scripting - SA-CONTRIB-2026-082EPSS 0.3%CVE-2025-47709MEDIUMEnterprise MFA - TFA for Drupal - Critical - Access bypass - SA-CONTRIB-2025-055EPSS 0.3%CVE-2026-3528MEDIUMCalculation Fields - Moderately critical - Cross-site Scripting - SA-CONTRIB-2026-023EPSS 0.3%CVE-2024-13272MEDIUMParagraphs table - Critical - Access bypass, Information Disclosure - SA-CONTRIB-2024-036EPSS 0.3%