Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo

CMS

Drupal

Drupal is an open-source platform and content management system for building dynamic web sites offering a broad range of features and services including user administration publishing workflow discussion capabilities news aggregation metadata functionalities using controlled vocabularies and XML publishing for content sharing purposes.

Official Site:

https://www.drupal.org/

Severity Summary:

Critical: 50 High: 116 Medium: 469 Low: 32
Reference
Title
Severity
CVE-2014-5022
Drupal Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2014-5020
Drupal Permissions Privileges and Access Controls Vulnerability
Medium
CVE-2014-5019
Drupal Improper Input Validation Vulnerability
Medium
CVE-2014-1607
Drupal Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2014-1476
Drupal Permissions Privileges and Access Controls Vulnerability
Medium
CVE-2013-6388
Drupal Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2013-6389
Drupal Improper Input Validation Vulnerability
Medium
CVE-2013-6386
Drupal Cryptographic Issues Vulnerability
Medium
CVE-2013-6385
Drupal Improper Control of Generation of Code (Code Injection) Vulnerability
Medium
CVE-2012-0826
Drupal Cross-Site Request Forgery (CSRF) Vulnerability
Medium
CVE-2020-9281
Drupal Core 8.x.x Cross-Site Scripting
Medium
CVE-2007-5595
Drupal Improper Neutralization of CRLF Sequences in HTTP Headers (HTTP Response Splitting) Vulnerability
Medium
CVE-2020-11022
Drupal Core 8.7.x Cross-Site Scripting
Medium
CVE-2016-6212
Drupal Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
Medium
CVE-2010-5312
Drupal Core 7.x Multiple Cross-Site Scripting Vulnerabilities
Medium
CVE-2021-41184
Drupal Core Cross-Site Scripting
Medium
CVE-2021-41184
Drupal Core 9.2.x Cross-Site Scripting
Medium
CVE-2021-41184
Drupal Core 9.3.x Cross-Site Scripting
Medium
No CVE number
Drupal Core 8.9.x Cross-Site Scripting
Medium
No CVE number
Drupal Core 9.1.x Cross-Site Scripting
Medium
No CVE number
Drupal Core 9.2.x Cross-Site Scripting
Medium
CVE-2016-9452
Drupal Improper Input Validation Vulnerability
Medium
CVE-2016-9451
Drupal URL Redirection to Untrusted Site (Open Redirect) Vulnerability
Medium
CVE-2016-7572
Drupal Permissions Privileges and Access Controls Vulnerability
Medium
CVE-2016-7571
Drupal Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2016-7570
Drupal Permissions Privileges and Access Controls Vulnerability
Medium
CVE-2016-3168
Drupal 7PK - Security Features Vulnerability
Medium
CVE-2021-41182
Drupal Core 7.x Multiple Cross-Site Scripting Vulnerabilities
Medium
CVE-2016-3166
Drupal Other Vulnerability
Medium
CVE-2016-9449
Drupal Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
Medium