Threats tagged 'drupal-contrib-2026-325'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	–	CVE-2026-126734Paragraphs entity embed · This module enables you to provide a way to embed parapraphs in any Medium2026-11-11GCVE DatabaseCVE-2026-126734 The Drupal module 'paragraphs_entity_embed' before version 4.0.1 contains a cross-site scripting (XSS) vulnerability due to insufficient filtering of malicious text in the autocomplete search filter. Exploitation requires the attacker to have permission to edit paragraph entity labels. A fix is available in version 4.0.1. Vulnerability #drupal-contrib-2026-325 #packagist-https-packages-drupa	GCVE Database	2026-11-11

Page 1 of 1