Webform (Drupal) - vulnerabilities (CVEs)

20 CVEs, 20 in the last 30 days, 1 known versions, newest CVE from 2026-10-22. Vendor: Drupal.

CVEs of Webform

CVE-2026-96361 - CVSS 4.6 (medium), 2026-10-22: Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Webform allows Cross-Site Scripting (XSS). This…
CVE-2026-96360 - CVSS 3.5 (low), 2026-10-22: Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Webform allows Cross-Site Scripting (XSS). This…
CVE-2026-96358 - CVSS 4.6 (medium), 2026-10-22: Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Webform allows Cross-Site Scripting (XSS). This…
CVE-2026-96359 - CVSS 4.6 (medium), 2026-10-22: Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Webform allows Cross-Site Scripting (XSS). This…
CVE-2026-96362 - CVSS 4.2 (medium), 2026-10-22: Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Webform allows Cross-Site Scripting (XSS). This…
CVE-2026-96363, 2026-10-22: Privilege Defined With Unsafe Actions vulnerability in Drupal Webform allows Stored XSS. This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0…
CVE-2026-96367 - CVSS 4.6 (medium), 2026-10-22: Privilege Defined With Unsafe Actions vulnerability in Drupal Webform allows Stored XSS. This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0…
CVE-2026-96368 - CVSS 4.6 (medium), 2026-10-22: Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Webform allows Stored XSS. This issue affects…
CVE-2026-96370 - CVSS 5.4 (medium), 2026-10-22: Incorrect Authorization vulnerability in Drupal Webform allows Server Side Request Forgery. This issue affects Webform versions: from 0.0.0 to 6.2.12, from…
CVE-2026-96369 - CVSS 3.1 (low), 2026-10-22: Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Webform allows Exploiting Incorrectly Configured Access Control Security…
CVE-2026-96371 - CVSS 5.4 (medium), 2026-10-22: Privilege Defined With Unsafe Actions vulnerability in Drupal Webform allows Stored XSS. This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0…
CVE-2026-96372 - CVSS 5.4 (medium), 2026-10-22: Insufficient Granularity of Access Control vulnerability in Drupal Webform allows Forceful Browsing. This issue affects Webform versions: from 0.0.0 to…
CVE-2026-96373 - CVSS 3.3 (low), 2026-10-22: Incorrect Authorization vulnerability in Drupal Webform allows Forceful Browsing. This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to…
CVE-2026-96366 - CVSS 5.3 (medium), 2026-10-22: Incorrect Authorization vulnerability in Drupal Webform allows Forceful Browsing. This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to…
CVE-2026-96365 - CVSS 7.5 (high), 2026-10-22: Allocation of Resources Without Limits or Throttling vulnerability in Drupal Webform allows Excessive Allocation. This issue affects Webform versions: from…
CVE-2026-96364 - CVSS 5.3 (medium), 2026-10-22: Improper Control of Interaction Frequency vulnerability in Drupal Webform allows Functionality Misuse. This issue affects Webform versions: from 0.0.0 to…
CVE-2026-96357 - CVSS 4.6 (medium), 2026-10-22: Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Webform allows Stored XSS. This issue affects…
CVE-2026-96398 - CVSS 4.3 (medium), 2026-10-22: Incorrect Authorization vulnerability in Drupal Webform allows Forceful Browsing. This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to…
CVE-2026-96356 - CVSS 5.3 (medium), 2026-10-22: Incorrect Authorization vulnerability in Drupal Webform allows Forceful Browsing. This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to…
CVE-2026-96355 - CVSS 9.1 (critical), 2026-10-22: Improper Neutralization of Special Elements Used in a Template Engine vulnerability in Drupal Webform allows Code Injection. This issue affects Webform…