TI-2026-11241 CVE-2026-13237 · GHSA-7c7x-54hv-3m8c
AI Agents - Moderately critical - Information disclosure, Access bypass - SA-CONTRIB-2026-057
Priority LOW 21
Incorrect Authorization vulnerability in Drupal AI Agents allows Forceful Browsing.
Vulnerabilities
11 records
TI-2026-11240 CVE-2026-13236 · GHSA-vqr6-3h85-q7hp
AI Agents - Less critical - Access bypass - SA-CONTRIB-2026-056
Priority LOW 19
Missing Authorization vulnerability in Drupal AI Agents allows Forceful Browsing.
TI-2026-11239 CVE-2026-13235 · GHSA-4c7f-qhrm-6jc8
AI (Artificial Intelligence) - Moderately critical - Access bypass - SA-CONTRIB-2026-055
Priority LOW 15
Missing Authorization vulnerability in Drupal AI (Artificial Intelligence) allows Forceful Browsing.
TI-2026-11238 CVE-2026-13234 · GHSA-q48q-x876-9gr8
AI (Artificial Intelligence) - Moderately critical - Information Disclosure / Cross-site Scripting - SA-CONTRIB-2026-054
Priority LOW 27
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal AI (Artificial Intelligence) allows Cross-Site Scripting (XSS).
TI-2026-03082 CVE-2026-3573 · GHSA-99mr-fjvp-4w9w
AI (Artificial Intelligence) - Moderately critical - Information Disclosure - SA-CONTRIB-2026-028
Priority LOW 38
Incorrect Authorization vulnerability in Drupal AI (Artificial Intelligence) allows Resource Injection.This issue affects AI (Artificial Intelligence): from 0.0.0 before 1.1.11, from 1.2.0 before 1.2.12.
TI-2025-12776 CVE-2025-13981 · GHSA-3p56-grmc-2fxh
AI (Artificial Intelligence) - Moderately critical - Cross-Site Scripting - SA-CONTRIB-2025-119
Priority LOW 19
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal AI (Artificial Intelligence) allows Cross-Site Scripting (XSS).This issue affects AI (Artificial Intelligence):…
TI-2025-22837 CVE-2025-31693 · GHSA-vx9m-rfxq-gr74
AI (Artificial Intelligence) - Moderately critical - Gadget Chain - SA-CONTRIB-2025-022
Priority LOW 33
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Drupal AI (Artificial Intelligence) allows OS Command Injection.This issue affects AI (Artificial Intelligence):…
TI-2025-22836 CVE-2025-31692 · GHSA-pwjq-fx3v-8f9r
AI (Artificial Intelligence) - Critical - Remote Code Execution - SA-CONTRIB-2025-021
Priority LOW 36
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Drupal AI (Artificial Intelligence) allows OS Command Injection.This issue affects AI (Artificial Intelligence):…
TI-2025-22822 CVE-2025-31678 · GHSA-c8q6-wp7v-46r9
AI (Artificial Intelligence) - Moderately critical - Access bypass, Information Disclosure - SA-CONTRIB-2025-004
Priority MEDIUM 42
Missing Authorization vulnerability in Drupal AI (Artificial Intelligence) allows Forceful Browsing.This issue affects AI (Artificial Intelligence): from 0.0.0 before 1.0.3.
TI-2025-22821 CVE-2025-31677 · GHSA-9w85-x5hg-fr66
AI (Artificial Intelligence) - Critical - Cross Site Request Forgery - SA-CONTRIB-2025-003
Priority LOW 39
Cross-Site Request Forgery (CSRF) vulnerability in Drupal AI (Artificial Intelligence) allows Cross Site Request Forgery.This issue affects AI (Artificial Intelligence): from 1.0.0 before 1.0.2.
TI-2015-07878 CVE-2015-9501 · GHSA-wfhp-qmf5-xqg5
The Artificial Intelligence theme before 1.2.4 for WordPress has XSS because Genericons…
Priority LOW 29
The Artificial Intelligence theme before 1.2.4 for WordPress has XSS because Genericons HTML files are unnecessarily placed under the web root.