DeutschShown in its original language — a full translation is planned for a future version.
Drupal Erweiterungen: Mehrere Schwachstellen
view advisory published 2026-06-04
Ein entfernter Angreifer kann mehrere Schwachstellen in verschiedenen Drupal Erweiterungen ausnutzen, um Daten zu manipulieren oder offenzulegen, sowie um Cross-Site Scripting Angriffe durchzuführen.
01
describes (4)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-49977US | — | — | ||
tarteaucitron.js is a compliant and accessible cookie banner. Prior to 1.33.0, tarteaucitron.cookie.purge() is called on any element with the purgeBtn class and does not check whet… | ||||
| CVE-2026-10770US | — | — | ||
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Anti-Spam by CleanTalk allows Reflected XSS. This issue affects Anti-Sp… | ||||
| CVE-2026-10769US | — | — | ||
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Commerce Core allows Stored XSS. This issue affects Commerce Core versi… | ||||
| CVE-2026-10768US | —OT elevated | — | ||
Missing Authorization vulnerability in Drupal LocalGov Workflows allows Forceful Browsing. This issue affects LocalGov Workflows versions: from 0.0.0 to 1.6.0. | ||||
02
references
External citations — patches, advisories, analysis.
- WID-SEC-W-2026-1799 - CSAF Versionself
- WID-SEC-2026-1799 - Portal Versionself
- Drupal Security Advisory sa-contrib-2026-039 vom 2026-06-04external
- Drupal Security Advisory sa-contrib-2026-040 vom 2026-06-04external
- Drupal Security Advisory sa-contrib-2026-041 vom 2026-06-04external
- Drupal Security Advisory sa-contrib-2026-042 vom 2026-06-04external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan