Read the docs

Drupal

Records942All Threatist records
Exploited (KEV)8In CISA KEV
CVSS critical56CVSS 9.0–10.0
CVSS high172CVSS 7.0–8.9

Exploited now

Drupal records in CISA KEV
TI-2026-07979 Drupal Core SQL Injection Vulnerability Priority CRITICAL 100KEV 2026-05-22TI-2020-08897 JQuery Cross-Site Scripting (XSS) Vulnerability Priority CRITICAL 88KEV 2025-01-23TI-2020-17477 PEAR Archive_Tar Deserialization of Untrusted Data Vulnerability Priority CRITICAL 93KEV 2022-08-25TI-2020-18513 PEAR Archive_Tar Improper Link Resolution Vulnerability Priority CRITICAL 90KEV 2022-08-25TI-2018-05494 Drupal Core Remote Code Execution Vulnerability Priority CRITICAL 100KEV 2022-04-13TI-2019-04505 Drupal Core Remote Code Execution Vulnerability Priority CRITICAL 94KEV 2022-03-25

Components

Products in the NVD configurations · select one to filter the records
Drupal 279 records CRITICAL Project Issue Tracking Module 6 records MEDIUM Print 5 records LOW Aggregation Module 4 records MEDIUM Everyblog 4 records LOW Project 4 records MEDIUM Ubercart Module 4 records LOW Content Construction Kit 3 records LOW

Records

3 records in Content Construction Kit · all components

TI-2008-05922 CVE-2008-6229 · GHSA-f4f6-f3qm-8mf5

Cross-site scripting (XSS) vulnerability in the administrative interface in Drupal…

Priority LOW 19

Cross-site scripting (XSS) vulnerability in the administrative interface in Drupal Content Construction Kit (CCK) 5.x before 5.x-1.10 and 6.x before 6.x-2.0, a module for Drupal, allows remote authenticated users with "a…

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.01019 Published 2009-02-20 No fix listed CWE-79
Open these records in search →