TI-2026-11245 CVE-2026-13241 · GHSA-83x2-c529-vx4j
Paragraphs - Moderately critical - Access bypass - SA-CONTRIB-2026-061
Priority LOW 34
Missing Authorization vulnerability in Drupal Paragraphs allows Forceful Browsing.
Md-systems
Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9
Exploited now
Md-systems records in CISA KEVNo Md-systems vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
4 records
TI-2026-11244 CVE-2026-13240 · GHSA-mcg9-jw6g-vx5q
Paragraphs - Less critical - Access bypass - SA-CONTRIB-2026-060
Priority LOW 34
Missing Authorization vulnerability in Drupal Paragraphs allows Forceful Browsing.
TI-2012-02356 CVE-2012-2724 · GHSA-59qq-h9qc-fpvf
Information disclosure in Simplenews
Priority LOW 29
The Simplenews module 6.x-1.x before 6.x-1.4, 6.x-2.x before 6.x-2.0-alpha4, and 7.x-1.x before 7.x-1.0-rc1 for Drupal reveals the email addresses of new mailing list subscribers when confirmation is required, which allo…
TI-2013-03899 CVE-2013-4447 · GHSA-9262-6whg-g7rv
Cross-site scripting (XSS) vulnerability in the API in the Simplenews module 6.x-1.x…
Priority LOW 25
Cross-site scripting (XSS) vulnerability in the API in the Simplenews module 6.x-1.x before 6.x-1.5 and 7.x-1.x before 7.x-1.1 for Drupal allows remote attackers to inject arbitrary web script or HTML via an email addres…