Drupal Project vulnerabilities

• drupal project browser Project Browser - Critical - Cross-site request forgery - SA-CONTRIB-2026-178 CVE-2026-96374 Fix available 4.2 MediumSeptember 23, 2026
• drupal project issue file review Multiple cross-site scripting (XSS) vulnerabilities in the Project Issue File Review module (PIFR... CVE-2014-8765 4.3 MediumOctober 14, 2014
• drupal project issue tracking module The Project Issue Tracking module 5.x-2.x-dev before 20080130 in the 5.x-2.x series, 5.x-1.2 and... CVE-2008-0577 6.4 MediumFebruary 5, 2008
• drupal project issue tracking module Cross-site scripting (XSS) vulnerability in the Project Issue Tracking module 5.x-2.x-dev before... CVE-2008-0576 4.3 MediumFebruary 5, 2008
• drupal project issue tracking Cross-site scripting (XSS) vulnerability in the subscription functionality in the Project issue... CVE-2007-5228 3.5 LowOctober 5, 2007
• drupal project, project issue tracking module +1 more The Drupal Project module before 5.x-1.0, 4.7.x-2.3, and 4.7.x-1.3 and Project issue tracking... CVE-2007-4436 5.0 MediumAugust 20, 2007
• drupal project issue tracking The Project issue tracking module before 4.7.x-1.3, 4.7.x-2.* before 4.7.x-2.3, and 5 before 5.x... CVE-2007-1368 3.5 LowMarch 9, 2007
• drupal project, project issue tracking module +1 more Multiple cross-site scripting (XSS) vulnerabilities in the (1) Project issue tracking 4.7.0... CVE-2007-0534 4.3 MediumJanuary 26, 2007
• drupal project, project issue tracking module +1 more The project_issue_access function in the Project issue tracking 4.7.0 through 5.x before 20070123... CVE-2007-0506 6.0 MediumJanuary 26, 2007
• drupal project, project issue tracking module +1 more Unrestricted file upload vulnerability in the Project issue tracking 4.7.0 through 5.x before... CVE-2007-0505 8.5 HighJanuary 26, 2007
• drupal project, project issue tracking +1 more Multiple cross-site scripting (XSS) vulnerabilities in Drupal (1) Project Issue Tracking 4.7.x-1... CVE-2006-6646 6.8 MediumDecember 20, 2006