Threats tagged 'drupal-contrib-2026-330'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	–	CVE-2026-126739drupal/page_manager · Page manager: This module enables you to create custom pages and to override existing paths, such as node or user Medium2026-11-11GCVE DatabaseCVE-2026-126739 The Page Manager module for Drupal allows creation and overriding of custom pages. The Page Manager UI submodule has a cross-site request forgery (CSRF) vulnerability that could allow an attacker to trick an authorized user into enabling or disabling pages without their consent. This requires the submodule to be enabled and the user to have the 'administer pages' permission. The issue is fixed in version 4.1.0. Vulnerability #drupal-contrib-2026-330 #packagist-https-packages-drupa	GCVE Database	2026-11-11

Page 1 of 1