https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-22T17:03:26.303119+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/drupal-contrib-2026-125 DRUPAL-CONTRIB-2026-125 2026-10-22T17:03:26.307899+00:00

Affected: Packagist:https://packages.drupal.org/8: drupal/otp_verification

This module enables you to add an extra layer of verification for user registration.

The module doesn't sufficiently filter user-supplied input before output, resulting in an unauthenticated reflected Cross-site Scripting (XSS) vulnerability.

 https://db.gcve.eu/vuln/fkie_cve-2026-84924 fkie_cve-2026-84924 2026-10-22T17:03:26.307975+00:00

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Email Verification / SMS Verification / OTP Verification allows Reflected XSS. This issue affects Email Verification / SMS Verification / OTP Verification versions: from 0.0.0 to 2.4.0.

 https://db.gcve.eu/vuln/ghsa-cr9m-wc8j-vr2m GHSA-cr9m-wc8j-vr2m 2026-10-22T17:03:26.308015+00:00

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Email Verification / SMS Verification / OTP Verification allows Reflected XSS. This issue affects Email Verification / SMS Verification / OTP Verification versions: from 0.0.0 to 2.4.0.

 https://db.gcve.eu/vuln/wid-sec-w-2026-3168 WID-SEC-W-2026-3168 — Drupal Erweiterungen: Mehrere Schwachstellen 2026-10-22T17:03:26.308036+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in verschiedenen Drupal Erweiterungen ausnutzen, um Zugriffsbeschränkungen zu umgehen, geschützte oder sensible Inhalte offenzulegen, Benutzerkonten zu übernehmen, unberechtigte Änderungen oder Löschungen vorzunehmen, Zahlungsstatus zu manipulieren sowie Cross-Site-Scripting-Angriffe auszuführen.