Drupal Core: two injection and code execution vulnerabilities detected

Two vulnerabilities have been identified in Drupal Core: a cross-site scripting (XSS) flaw via AJAX modal dialogs, and code execution via unserialize() gadget chain.

Published 21sem1 sourceMajorupdated 17sem

Lire en français

≈ 23sSpeed

The fact

Attackers can inject malicious code on the client or server side to compromise Drupal sites.

Drupal site administrators must apply security patches as a priority.

Click the link to read an article on the topic:

GlobalSecurityMag

Explore this topic

Drupal #Drupal Core #XSS #exécution de code #unserialize

What if you saw the whole news differently?Factae cross-checks hundreds of sources worldwide to keep only the fact, no opinion. Explore the front page.

Follow topic →

Auto-synthesis from 1 media source · identified on June 16, 2026

← Back to home

The fact

Read more

Check Point: Destructive attacks exploit PHP flaw and critical vulnerability

PostgreSQL Fixes 52 Vulnerabilities, Including 22-Year-Old Flaw

SilentAir: Hackers intercept calls and SMS via mobile network nodes

UK: Increased monitoring of medical record access

Germany: Parliament Expands Cyber Powers for Intelligence Agencies

Windows: Zero-Day Flaw Grants System Rights Without Authentication