CVEvulnerability
CVE-2026-96363
- Status
- Awaiting Analysis
- Published
- 2026-10-22
- Last modified
- 2026-10-22
- Assigner
- [email protected]
- Weaknesses
- CWE-267
Description
Privilege Defined With Unsafe Actions vulnerability in Drupal Webform allows Stored XSS. This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1.
Related
Weakness · CWE (1)
- CWE-267 Privilege Defined With Unsafe Actions weakness
References
- https://www.drupal.org/sa-contrib-2026-161 www.drupal.org