Insufficient Granularity of Access Control vulnerability in Drupal Paragraphs table allows Content Spoofing.This issue affects Paragraphs table: from 0.0.0 before 1.23.0, from 2.0.0 before 2.0.2.
CVSS 3.1MEDIUM 6.3·Network·Low privileges·No interaction·EPSS 0.00252·Published 2025-01-09·Fixed in 1.23.0, 2.0.2CWE-1220
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Paragraphs table allows Cross-Site Scripting (XSS).This issue affects Paragraphs table: from 2.0.0 before 2.0.5…
CVSS 3.1MEDIUM 5.4·Network·No auth·User interaction·EPSS 0.0022·Published 2025-06-26·Fixed in 2.0.5CWE-79