Threats tagged 'drupal-contrib-2026-294'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	–	CVE-2026-118566drupal/content_synchronizer · The Content Synchronizer module allows content to be exported and imported between Drupal sites via High2026-11-04GCVE DatabaseCVE-2026-118566 The Content Synchronizer module for Drupal allows content export and import between sites using archive files. A vulnerability exists due to insufficient sanitization of input passed to client-side code, resulting in a DOM-based cross-site scripting (XSS) flaw. This issue affects versions prior to 4.1.1 and has been fixed in version 4.1.1. Vulnerability #drupal-contrib-2026-294 #packagist-https-packages-drupa	GCVE Database	2026-11-04

Page 1 of 1