https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 22 Oct 2026 19:19:04 +0000 https://db.gcve.eu/vuln/drupal-contrib-2026-123 <p><strong>Affected:</strong> Packagist:https://packages.drupal.org/8: drupal/component_blocks</p> <p>This module enables you use UI Patterns with blocks, for use in Layout Builder.</p> <p>The module doesn&#39;t sufficiently validate user input before passing to token replacement.</p> <p>This vulnerability is mitigated by the fact that an attacker must have a role with the ability to edit layout builder layouts.</p> <p><strong>Affected:</strong> Packagist:https://packages.drupal.org/8: drupal/component_blocks</p> <p>This module enables you use UI Patterns with blocks, for use in Layout Builder.</p> <p>The module doesn&#39;t sufficiently validate user input before passing to token replacement.</p> <p>This vulnerability is mitigated by the fact that an attacker must have a role with the ability to edit layout builder layouts.</p> https://db.gcve.eu/vuln/drupal-contrib-2026-123 https://db.gcve.eu/vuln/fkie_cve-2026-84915 <p>Improper Neutralization of Input During Web Page Generation (&#34;Cross-site Scripting&#34;) vulnerability in Drupal Component blocks allows Stored XSS. This issue affects Component blocks versions: from 0.0.0 to 1.2.7.</p> <p>Improper Neutralization of Input During Web Page Generation (&#34;Cross-site Scripting&#34;) vulnerability in Drupal Component blocks allows Stored XSS. This issue affects Component blocks versions: from 0.0.0 to 1.2.7.</p> https://db.gcve.eu/vuln/fkie_cve-2026-84915 https://db.gcve.eu/vuln/ghsa-xf3c-7v88-48w2 <p>Improper Neutralization of Input During Web Page Generation (&#34;Cross-site Scripting&#34;) vulnerability in Drupal Component blocks allows Stored XSS. This issue affects Component blocks versions: from 0.0.0 to 1.2.7.</p> <p>Improper Neutralization of Input During Web Page Generation (&#34;Cross-site Scripting&#34;) vulnerability in Drupal Component blocks allows Stored XSS. This issue affects Component blocks versions: from 0.0.0 to 1.2.7.</p> https://db.gcve.eu/vuln/ghsa-xf3c-7v88-48w2 https://db.gcve.eu/vuln/wid-sec-w-2026-3168 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in verschiedenen Drupal Erweiterungen ausnutzen, um Zugriffsbeschränkungen zu umgehen, geschützte oder sensible Inhalte offenzulegen, Benutzerkonten zu übernehmen, unberechtigte Änderungen oder Löschungen vorzunehmen, Zahlungsstatus zu manipulieren sowie Cross-Site-Scripting-Angriffe auszuführen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in verschiedenen Drupal Erweiterungen ausnutzen, um Zugriffsbeschränkungen zu umgehen, geschützte oder sensible Inhalte offenzulegen, Benutzerkonten zu übernehmen, unberechtigte Änderungen oder Löschungen vorzunehmen, Zahlungsstatus zu manipulieren sowie Cross-Site-Scripting-Angriffe auszuführen.</p> https://db.gcve.eu/vuln/wid-sec-w-2026-3168