Read the docs

Drupal

Records942All Threatist records
Exploited (KEV)8In CISA KEV
CVSS critical56CVSS 9.0–10.0
CVSS high172CVSS 7.0–8.9

Exploited now

Drupal records in CISA KEV
TI-2026-07979 Drupal Core SQL Injection Vulnerability Priority CRITICAL 100KEV 2026-05-22TI-2020-08897 JQuery Cross-Site Scripting (XSS) Vulnerability Priority CRITICAL 88KEV 2025-01-23TI-2020-17477 PEAR Archive_Tar Deserialization of Untrusted Data Vulnerability Priority CRITICAL 93KEV 2022-08-25TI-2020-18513 PEAR Archive_Tar Improper Link Resolution Vulnerability Priority CRITICAL 90KEV 2022-08-25TI-2018-05494 Drupal Core Remote Code Execution Vulnerability Priority CRITICAL 100KEV 2022-04-13TI-2019-04505 Drupal Core Remote Code Execution Vulnerability Priority CRITICAL 94KEV 2022-03-25

Components

Products in the NVD configurations · select one to filter the records
Drupal 279 records CRITICAL Project Issue Tracking Module 6 records MEDIUM Print 5 records LOW Aggregation Module 4 records MEDIUM Everyblog 4 records LOW Project 4 records MEDIUM Ubercart Module 4 records LOW Content Construction Kit 3 records LOW

Records

5 records in Print · all components

TI-2009-01277 CVE-2009-1343 · GHSA-gqf9-gx92-58wc

Cross-site scripting (XSS) vulnerability in the Print (aka Printer, e-mail and PDF…

Priority LOW 22

Cross-site scripting (XSS) vulnerability in the Print (aka Printer, e-mail and PDF versions) module 5.x before 5.x-4.5 and 6.x before 6.x-1.5, a module for Drupal, allows remote attackers to inject arbitrary web script o…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01065 Published 2009-04-20 No fix listed CWE-79
TI-2014-06695 CVE-2014-8078 · GHSA-86w8-74wf-5cgg

Cross-site scripting (XSS) vulnerability in the Print (aka Printer, e-mail and PDF…

Priority LOW 19

Cross-site scripting (XSS) vulnerability in the Print (aka Printer, e-mail and PDF versions) module 6.x-1.x before 6.x-1.19, 7.x-1.x before 7.x-1.3, and 7.x-2.x before 7.x-2.0 for Drupal allows remote authenticated users…

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.01046 Published 2014-10-09 No fix listed CWE-79
TI-2009-01735 CVE-2009-1823 · GHSA-v6mm-w6pc-8r7c

Cross-site scripting (XSS) vulnerability in the Print (aka Printer, e-mail and PDF…

Priority LOW 16

Cross-site scripting (XSS) vulnerability in the Print (aka Printer, e-mail and PDF versions) module 5.x before 5.x-4.7 and 6.x before 6.x-1.7, a module for Drupal, allows remote attackers to inject arbitrary web script o…

CVSS 2.0LOW 2.6 Network No auth Interaction — EPSS 0.01235 Published 2009-05-29 No fix listed CWE-79
Open these records in search →