Threats tagged 'drupal-contrib-2026-309'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	–	CVE-2026-122078drupal/extended_html_filter · The Extended HTML Filter module allows using style attributes in CKEditor High2026-11-04GCVE DatabaseCVE-2026-122078 The Extended HTML Filter module for Drupal allows the use of style attributes in CKEditor. Its XSS filter does not sufficiently sanitize certain HTMX attributes, leading to a cross-site scripting (XSS) vulnerability. Exploitation requires an attacker to be able to insert HTML with specific attributes. A fix is available in version 1.0.4. Vulnerability #drupal-contrib-2026-309 #packagist-https-packages-drupa	GCVE Database	2026-11-04

Page 1 of 1