Exposición de Drupal

CMS
279
score de exposición
94.414
sitios usan
4
en explotación
9
críticos

CVEs

104 resultados
CVE-2026-58587MEDIUMDrupal Canvas - Moderately critical - Improper validation - SA-CONTRIB-2026-065EPSS 0.3%CVE-2026-58588MEDIUMDrupal Canvas - Moderately critical - Improper validation - SA-CONTRIB-2026-066EPSS 0.3%CVE-2025-47709MEDIUMEnterprise MFA - TFA for Drupal - Critical - Access bypass - SA-CONTRIB-2025-055EPSS 0.3%CVE-2025-13082MEDIUMDrupal core - Moderately critical - Defacement - SA-CORE-2025-007EPSS 0.2%CVE-2026-8492LOWTranslate Drupal with GTranslate - Less critical - DOM clobbering / link manipulation - SA-CONTRIB-2026-035EPSS 0.2%CVE-2025-6675MEDIUMEnterprise MFA - TFA for Drupal - Critical - Access bypass - SA-CONTRIB-2025-082EPSS 0.2%CVE-2025-48294MEDIUMWordPress FG Drupal to WordPress plugin <= 3.90.0 - Server Side Request Forgery (SSRF) VulnerabilityEPSS 0.2%CVE-2026-0749MEDIUMCross-Site Scripting Vulnerability in Drupal Form Builder ModuleEPSS 0.2%CVE-2026-15084MEDIUMUI Patterns (SDC in Drupal UI) - Moderately critical - Cross site scripting - SA-CONTRIB-2026-075EPSS 0.2%CVE-2026-77152MEDIUMField Collection for Drupal 7 access bypass via missing parent entity access checkEPSS 0.2%CVE-2026-55805MEDIUMDrupal core - Moderately critical - Cross-site scripting - SA-CORE-2026-012EPSS 0.2%CVE-2025-11570MEDIUMVersions of the package drupal-pattern-lab/unified-twig-extensions from 0.0.0 are vulnerable to Cross-site Scripting (XSS) due to insufficieEPSS 0.2%CVE-2026-55807LOWDrupal core - Moderately critical - Server-side request forgery - SA-CORE-2026-008EPSS 0.2%CVE-2026-6365MEDIUMDrupal core - Critical - Cross-site scripting - SA-CORE-2026-001EPSS 0.2%CVE-2026-15917MEDIUMDrupal core - Moderately critical - Cross-site scripting - SA-CORE-2026-011EPSS 0.2%CVE-2024-13250HIGHDrupal Symfony Mailer Lite - Moderately critical - Cross Site Request Forgery - SA-CONTRIB-2024-014EPSS 0.2%CVE-2025-47708HIGHEnterprise MFA - TFA for Drupal - Critical - Cross Site Request Forgery - SA-CONTRIB-2025-054EPSS 0.2%CVE-2026-6367MEDIUMDrupal core - Moderately critical - Cross-site scripting - SA-CORE-2026-003EPSS 0.2%CVE-2026-108515MEDIUMDrupal core - Moderately critical - Cross-site scripting - SA-CORE-2026-015EPSS 0.2%CVE-2026-108514MEDIUMDrupal core - Moderately critical - Cross-site scripting - SA-CORE-2026-016EPSS 0.2%