Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo

CMS

Drupal

Drupal is an open-source platform and content management system for building dynamic web sites offering a broad range of features and services including user administration publishing workflow discussion capabilities news aggregation metadata functionalities using controlled vocabularies and XML publishing for content sharing purposes.

Official Site:

https://www.drupal.org/

Severity Summary:

Critical: 50 High: 116 Medium: 469 Low: 32
Reference
Title
Severity
CVE-2015-2750
Drupal URL Redirection to Untrusted Site (Open Redirect) Vulnerability
Medium
CVE-2020-13670
Drupal Core 8.x.x Information Disclosure
Medium
CVE-2020-13670
Drupal Core 8.8.x Information Disclosure
Medium
CVE-2020-13670
Drupal Core 8.9.x Information Disclosure
Medium
CVE-2020-13670
Drupal Core 9.0.x Information Disclosure
Medium
CVE-2020-13667
Drupal Core 8.x.x Security Bypass
Medium
CVE-2020-13667
Drupal Core 8.8.x Security Bypass
Medium
CVE-2020-13667
Drupal Core 8.9.x Security Bypass
Medium
CVE-2020-13667
Drupal Core 9.0.x Security Bypass
Medium
CVE-2020-13666
Drupal Core 7.x Cross-Site Scripting
Medium
CVE-2006-5476
Drupal Core 4.7.x Cross-Site Request Forgery
Medium
CVE-2006-5476
Drupal Core 4.6.x Cross-Site Request Forgery
Medium
CVE-2007-0136
Drupal Core 4.7.x Cross-Site Scripting
Medium
CVE-2009-1047
Drupal Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2015-3234
Drupal Core 7.x Multiple Vulnerabilities
Medium
CVE-2015-3233
Drupal Core 7.x Multiple Vulnerabilities
Medium
CVE-2015-3232
Drupal Core 7.x Multiple Vulnerabilities
Medium
CVE-2015-3231
Drupal Core 7.x Multiple Vulnerabilities
Medium
CVE-2015-6661
Drupal Core 6.x Multiple Vulnerabilities
Medium
CVE-2015-6660
Drupal Core 6.x Multiple Vulnerabilities
Medium
CVE-2015-6658
Drupal Core 6.x Multiple Vulnerabilities
Medium
CVE-2009-2373
Drupal Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2009-1576
Drupal Vulnerability
Medium
CVE-2008-6533
Drupal Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2008-6532
Drupal Cross-Site Request Forgery (CSRF) Vulnerability
Medium
CVE-2019-11358
Drupal Improperly Controlled Modification of Object Prototype Attributes (Prototype Pollution) Vulnerability
Medium
CVE-2009-1575
Drupal Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2015-2559
Drupal Core 7.x Multiple Vulnerabilities
Medium
CVE-2010-2471
Drupal URL Redirection to Untrusted Site (Open Redirect) Vulnerability
Medium
CVE-2010-2250
Drupal Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium