Threats tagged 'drupal-contrib-2026-310'

The WordsOnline Connector module for Drupal, which integrates with the WordsOnline translation service via the TMGMT module, contains an SQL Injection vulnerability due to improper data validation. Exploitation requires the attacker to be logged in with the 'Create translation jobs' permission. The vulnerability allows reading data from the Drupal database, including user account information. A fix is available in version 2.0.6.