Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium

CMS

Drupal

Drupal is an open-source platform and content management system for building dynamic web sites offering a broad range of features and services including user administration publishing workflow discussion capabilities news aggregation metadata functionalities using controlled vocabularies and XML publishing for content sharing purposes.

Official Site:

https://www.drupal.org/

Severity Summary:

Critical: 54 High: 119 Medium: 485 Low: 34
Reference
Title
Severity
CVE-2026-55806
Drupal URL Redirection to Untrusted Site (Open Redirect) Vulnerability
Medium
CVE-2026-55808
Drupal Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2026-6365
Drupal Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2026-6366
Drupal Improperly Controlled Modification of Dynamically-Determined Object Attributes Vulnerability
Medium
CVE-2026-6367
Drupal Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2025-13080
Drupal Improper Check for Unusual or Exceptional Conditions Vulnerability
Medium
CVE-2025-13081
Drupal Improperly Controlled Modification of Dynamically-Determined Object Attributes Vulnerability
Medium
CVE-2025-13082
Drupal User Interface (UI) Misrepresentation of Critical Information Vulnerability
Medium
CVE-2019-6341
Drupal Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2025-3057
Drupal Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2015-6665
Drupal Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2015-6660
Drupal Cross-Site Request Forgery (CSRF) Vulnerability
Medium
CVE-2023-31250
Drupal Incorrect Authorization Vulnerability
Medium
CVE-2024-12393
Drupal Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2024-11942
Drupal Other Vulnerability
Medium
CVE-2024-55635
Drupal Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2017-6923
Drupal Missing Authorization Vulnerability
Medium
CVE-2025-31673
Drupal Incorrect Authorization Vulnerability
Medium
CVE-2025-31675
Drupal Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2015-6658
Drupal Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2015-3234
Drupal Improper Input Validation Vulnerability
Medium
CVE-2022-24775
Drupal Improper Input Validation Vulnerability
Medium
CVE-2015-3233
Drupal Other Vulnerability
Medium
CVE-2022-31042
Drupal Improper Removal of Sensitive Information Before Storage or Transfer Vulnerability
Medium
CVE-2022-31043
Drupal Improper Removal of Sensitive Information Before Storage or Transfer Vulnerability
Medium
CVE-2020-11023
Drupal Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2021-41184
Drupal Core 9.2.x Cross-Site Scripting
Medium
No CVE number
Drupal Core 8.9.x Cross-Site Scripting
Medium
CVE-2020-13669
Drupal Core 8.8.x Multiple Cross-Site Scripting Vulnerabilities
Medium
CVE-2012-5652
Drupal Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
Medium