Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo

CMS

Drupal

Drupal is an open-source platform and content management system for building dynamic web sites offering a broad range of features and services including user administration publishing workflow discussion capabilities news aggregation metadata functionalities using controlled vocabularies and XML publishing for content sharing purposes.

Official Site:

https://www.drupal.org/

Severity Summary:

Critical: 50 High: 116 Medium: 469 Low: 32
Reference
Title
Severity
CVE-2019-11876
Drupal Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2009-1575
Drupal Core 5.x Cross-Site Scripting
Medium
CVE-2010-3092
Drupal Core 5.x Multiple Security Bypass Vulnerabilities
Medium
CVE-2009-4369
Drupal Core 6.x Multiple Cross-Site Scripting Vulnerabilities
Medium
CVE-2010-3093
Drupal Core 5.x Multiple Security Bypass Vulnerabilities
Medium
No CVE number
Drupal Core 8.x.x Denial of Service
Low
CVE-2022-24728
Drupal Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Low
CVE-2006-2833
Drupal Other Vulnerability
Low
CVE-2006-2832
Drupal Other Vulnerability
Low
CVE-2007-5595
Drupal Core 5.x HTTP Response Splitting
Low
CVE-2010-3094
Drupal Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Low
CVE-2007-5595
Drupal Core 4.7.x HTTP Response Splitting
Low
CVE-2006-5477
Drupal Other Vulnerability
Low
CVE-2007-5621
Drupal Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Low
CVE-2008-6170
Drupal Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Low
CVE-2007-0124
Drupal Other Vulnerability
Low
CVE-2015-2559
Drupal Improper Access Control Vulnerability
Low
CVE-2008-0272
Drupal Core 5.x Cross-Site Request Forgery
Low
CVE-2013-0245
Drupal Permissions Privileges and Access Controls Vulnerability
Low
CVE-2009-4370
Drupal Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Low
CVE-2008-1131
Drupal Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Low
CVE-2013-6387
Drupal Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Low
CVE-2012-0827
Drupal Permissions Privileges and Access Controls Vulnerability
Low
CVE-2014-5021
Drupal Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Low
CVE-2007-6752
Drupal Core 7.x Cross-Site Request Forgery
Low
CVE-2009-3156
Drupal Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Low
CVE-2009-4371
Drupal Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Low
CVE-2009-1844
Drupal Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Low
CVE-2012-1588
Drupal Resource Management Errors Vulnerability
Low
SA-2008-046
Drupal Session Fixation Vulnerability
Low