https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 30 Oct 2026 20:17:37 +0000 https://db.gcve.eu/vuln/drupal-contrib-2026-226 <p><strong>Affected:</strong> Packagist:https://packages.drupal.org/8: drupal/csv_field</p> <p>This module enables you to upload CSV files to a field and display them as an interactive, sortable and searchable table.</p> <p>The module doesn&#39;t sufficiently escape CSV cell and header values before passing them to the DataTables library, leading to a potential cross-site scripting vulnerability.</p> <p>This vulnerability is mitigated by the fact that an attacker must have a role with permission to create or edit content that contains a CSV field.</p> <p><strong>Affected:</strong> Packagist:https://packages.drupal.org/8: drupal/csv_field</p> <p>This module enables you to upload CSV files to a field and display them as an interactive, sortable and searchable table.</p> <p>The module doesn&#39;t sufficiently escape CSV cell and header values before passing them to the DataTables library, leading to a potential cross-site scripting vulnerability.</p> <p>This vulnerability is mitigated by the fact that an attacker must have a role with permission to create or edit content that contains a CSV field.</p> https://db.gcve.eu/vuln/drupal-contrib-2026-226 https://db.gcve.eu/vuln/fkie_cve-2026-114529 <p>Improper Neutralization of Input During Web Page Generation (&#34;Cross-site Scripting&#34;) vulnerability in Drupal CSV Field allows Stored XSS. This issue affects CSV Field versions: from 0.0.0 to 2.0.10, from 3.0.0 to 3.0.7.</p> <p>Improper Neutralization of Input During Web Page Generation (&#34;Cross-site Scripting&#34;) vulnerability in Drupal CSV Field allows Stored XSS. This issue affects CSV Field versions: from 0.0.0 to 2.0.10, from 3.0.0 to 3.0.7.</p> https://db.gcve.eu/vuln/fkie_cve-2026-114529 https://db.gcve.eu/vuln/ghsa-6j4f-769r-j7ww <p>Improper Neutralization of Input During Web Page Generation (&#34;Cross-site Scripting&#34;) vulnerability in Drupal CSV Field allows Stored XSS. This issue affects CSV Field versions: from 0.0.0 to 2.0.10, from 3.0.0 to 3.0.7.</p> <p>Improper Neutralization of Input During Web Page Generation (&#34;Cross-site Scripting&#34;) vulnerability in Drupal CSV Field allows Stored XSS. This issue affects CSV Field versions: from 0.0.0 to 2.0.10, from 3.0.0 to 3.0.7.</p> https://db.gcve.eu/vuln/ghsa-6j4f-769r-j7ww https://db.gcve.eu/vuln/wid-sec-w-2026-4230 <p>Ein Angreifer kann mehrere Schwachstellen in Drupal ausnutzen, um erweiterte Berechtigungen zu erlangen und Benutzerkonten zu übernehmen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, Daten zu manipulieren, Cross-Site-Scripting-Angriffe durchzuführen und nicht näher spezifizierte Auswirkungen zu verursachen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Drupal ausnutzen, um erweiterte Berechtigungen zu erlangen und Benutzerkonten zu übernehmen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, Daten zu manipulieren, Cross-Site-Scripting-Angriffe durchzuführen und nicht näher spezifizierte Auswirkungen zu verursachen.</p> https://db.gcve.eu/vuln/wid-sec-w-2026-4230