Drupal — система управления контентом с открытым исходным кодом. На Drupal работает более миллиона сайтов — от личных блогов до сайтов компаний, политических партий и государственных организаций.

Drupal Cross Site Scripting (XSS) vulnerability

PrestaShop Cross-site Scripting vulnerability

Drupal Core Cross-site scripting vulnerability

Drupal Core Cross-Site Request Forgery (CSRF) vulnerability

Drupal Core Cross-site scripting vulnerability

Drupal Core Open Redirect vulnerability

Drupal Core Access bypass vulnerability

Drupal Core Arbitrary PHP code execution vulnerability

Drupal Core Access bypass vulnerability

The Simplenews Scheduler module 6.x-2.x before 6.x-2.4 for Drupal allows remote authenticated users with the "send scheduled newsletters" permission to inject arbitrary PHP code into the scheduling form, which is later executed by cron.