Read the docs

Drupal

Records942All Threatist records
Exploited (KEV)8In CISA KEV
CVSS critical56CVSS 9.0–10.0
CVSS high172CVSS 7.0–8.9

Exploited now

Drupal records in CISA KEV
TI-2026-07979 Drupal Core SQL Injection Vulnerability Priority CRITICAL 100KEV 2026-05-22TI-2020-08897 JQuery Cross-Site Scripting (XSS) Vulnerability Priority CRITICAL 88KEV 2025-01-23TI-2020-17477 PEAR Archive_Tar Deserialization of Untrusted Data Vulnerability Priority CRITICAL 93KEV 2022-08-25TI-2020-18513 PEAR Archive_Tar Improper Link Resolution Vulnerability Priority CRITICAL 90KEV 2022-08-25TI-2018-05494 Drupal Core Remote Code Execution Vulnerability Priority CRITICAL 100KEV 2022-04-13TI-2019-04505 Drupal Core Remote Code Execution Vulnerability Priority CRITICAL 94KEV 2022-03-25

Components

Products in the NVD configurations · select one to filter the records
Drupal 279 records CRITICAL Project Issue Tracking Module 6 records MEDIUM Print 5 records LOW Aggregation Module 4 records MEDIUM Everyblog 4 records LOW Project 4 records MEDIUM Ubercart Module 4 records LOW Content Construction Kit 3 records LOW

Records

4 records in Ubercart Module · all components

TI-2008-01840 CVE-2008-1916 · GHSA-56j4-x43g-j8hc

Multiple cross-site scripting (XSS) vulnerabilities in the Ubercart 5.x before…

Priority LOW 22

Multiple cross-site scripting (XSS) vulnerabilities in the Ubercart 5.x before 5.x-1.0-rc1 module for Drupal allow remote attackers to inject arbitrary web script or HTML via text fields intended for the (1) address and…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01022 Published 2008-04-22 No fix listed CWE-79
TI-2008-01371 CVE-2008-1428 · GHSA-78j5-67xv-wrw7

Multiple cross-site scripting (XSS) vulnerabilities in the Ubercart 5.x before…

Priority LOW 22

Multiple cross-site scripting (XSS) vulnerabilities in the Ubercart 5.x before 5.x-1.0-beta7 module for Drupal allow remote attackers to inject arbitrary web script or HTML via a text attribute value for a product.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01022 Published 2008-03-20 No fix listed CWE-79
TI-2008-01901 CVE-2008-1978 · GHSA-mcg9-wmv9-gjf3

Cross-site scripting (XSS) vulnerability in the Ubercart 5.x before 5.x-1.0 rc3 module…

Priority LOW 18

Cross-site scripting (XSS) vulnerability in the Ubercart 5.x before 5.x-1.0 rc3 module for Drupal allows remote authenticated users to inject arbitrary web script or HTML via node titles related to unspecified product fe…

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.00868 Published 2008-04-27 No fix listed CWE-79
TI-2007-05402 CVE-2007-5621 · GHSA-7c37-p4gh-wrh2

Multiple cross-site scripting (XSS) vulnerabilities in the Token module before 4.7.x-1.5…

Priority LOW 18

Multiple cross-site scripting (XSS) vulnerabilities in the Token module before 4.7.x-1.5, and 5.x before 5.x-1.9, for Drupal; as used by the ASIN Field, e-Commerce, Fullname field for CCK, Invite, Node Relativity, Pathau…

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.00842 Published 2007-10-22 No fix listed CWE-79
Open these records in search →