Threats tagged 'drupal-contrib-2026-319'

The Texts module for Drupal has a vulnerability that allows a user with access to the translation overview to overwrite an existing translation and delete a duplicate translation via a crafted request. This can occur even if the user does not have permissions to edit or delete translations. Exploitation requires an attacker to first create a suitable duplicate translation and trick a user with the necessary access to open the malicious request. The issue is fixed in version 1.0.17.