Drupal — система управления контентом с открытым исходным кодом. На Drupal работает более миллиона сайтов — от личных блогов до сайтов компаний, политических партий и государственных организаций.

Enhanced Image plugin for CKEditor is vulnerable to Cross-site scripting (XSS)

Drupal access control bypass vulnerability

Drupal Settings Tray access bypass

Drupal access bypass vulnerability

Drupal Entity access bypass for entities that do not have UUIDs or have protected revisions

Drupal access bypass vulnerability

Drupal Remote code execution

Drupal editor module incorrectly checks access to inline private files

Drupal REST API can bypass comment approval

Drupal core access bypass vulnerability