Security Update

Security

Moderately Critical XSS Vulnerability in Navbar in Drupal 7

Share

× SHARE

The Drupal Security Team announced a moderately critical Cross-site Scripting-SA-CONTRIB-2022-011 Vulnerability in Navbar module in Drupal 7on January 25th, 2022. ...more

Read Full Content
Security

Multiple Critical Vulnerabilities in the Private Taxonomy Terms Module!

Share

× SHARE

Critical Access bypass, Information Disclosure, and Multiple Vulnerabilities in the Private Taxonomy Terms module SA-CONTRIB-2022-014 was announced on January 26th, 2022 ...more

Read Full Content
Security

Moderately Critical XSS Vulnerability in jQuery UI Datepicker

Share

× SHARE

A Drupal security advisory was announced against a moderately critical XSS vulnerability (SA-CONTRIB-2022-004) in the vendor library, jQuery UI, on January 19th, 2022 ...more

Read Full Content
Security

Moderately Critical Access bypass Vulnerability in Simple OAuth & OpenID Connect

Share

× SHARE

Drupal security team announced a moderately critical access bypass vulnerability SA-CONTRIB-2022-002 in Simple OAuth (OAuth2) & OpenID Connect on 2022, January 5th. ...more

Read Full Content
Security

Critical Access bypass Vulnerability in Super Login Drupal 8

Share

× SHARE

The Drupal security team has announced a critical access bypass vulnerability SA-CONTRIB-2022-001 in the Super Login module in Drupal 8, posted on 2022, January 5th. ...more

Read Full Content
Security

Moderately Critical XSS Vulnerability Discovered in CKEditor

Share

× SHARE

CKEditor has released a security update SA- Core-2021-011 that impacts Drupal. The issue, dated November 17, 2021, is classified as a moderately critical cross-site scripting (XSS) vulnerability. ...more

Read Full Content
Blog

Drupal Core Security Updates of September 15, 2021

Share

× SHARE

The latest Drupal newsletter reported quite a few security advisory updates. These security updates are for the Core and are moderately critical level. ...more

Read Full Content
Blog

Drupal 8 & 9 Core Security Release of Aug 12th, 2021 To Curtail Scripting Vulnerability

Share

× SHARE

Drupal Vendor library security release came into effect on August 8th according to PSA . The Core update addresses the CKEditor cross-site scripting issue. ...more

Read Full Content