Threats tagged 'drupal-contrib-2026-315'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	–	CVE-2026-122079drupal/htmlawed · The htmLawed module enables use of the htmLawed PHP library as a filter in a Text Format for High2026-11-04GCVE DatabaseCVE-2026-122079 The htmLawed module for Drupal uses the htmLawed PHP library to filter HTML in text input. A vulnerability exists because the filter does not sufficiently sanitize attributes, resulting in a cross-site scripting (XSS) flaw. This affects Drupal sites using htmLawed versions from 4.1.0 up to but not including 4.1.11. A fix is available in version 4.1.11. Vulnerability #drupal-contrib-2026-315 #packagist-https-packages-drupa	GCVE Database	2026-11-04

Page 1 of 1