Threats tagged 'drupal-contrib-2026-314'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	–	CVE-2026-122080drupal/htmlawed · The htmLawed module enables use of the htmLawed PHP library as a filter in a Text Format for High2026-11-04GCVE DatabaseCVE-2026-122080 The htmLawed module for Drupal uses the htmLawed PHP library to filter HTML in text input. Versions prior to 3.9.0 and 4.1.8 are vulnerable to a cross-site scripting (XSS) attack due to improper handling of malformed UTF-8 characters. This vulnerability affects only sites using an SQLite database and can allow bypass of the module's malicious HTML filtering. Vulnerability #drupal-contrib-2026-314 #packagist-https-packages-drupa	GCVE Database	2026-11-04

Page 1 of 1