Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage
Drupal

Drupal Webform vulnerabilities

20 published CVEs name Drupal Webform among the affected products.

Published CVEs
20
Last 12 months
20
Critical
1
Known exploited
0

Critical 1High 1Medium 14Low 4Not scored 0

Newest CVEs

  • CVE-2026-96360

    Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-154

    Drupal · Webform

    Low3.5
  • CVE-2026-96361

    Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-155

    Drupal · Webform

    Medium4.6
  • CVE-2026-96358

    Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-158

    Drupal · Webform

    Medium4.6
  • CVE-2026-96359

    Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-159

    Drupal · Webform

    Medium4.6
  • CVE-2026-96362

    Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-160

    Drupal · Webform

    Medium4.2
  • CVE-2026-96363

    Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-161

    Drupal · Webform

    Low3.1
  • CVE-2026-96367

    Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-162

    Drupal · Webform

    Medium4.6
  • CVE-2026-96368

    Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-163

    Drupal · Webform

    Medium4.6
  • CVE-2026-96370

    Webform - Moderately critical - Access bypass, Server-side request forgery - SA-CONTRIB-2026-164

    Drupal · Webform

    Medium5.4
  • CVE-2026-96369

    Webform - Less critical - Access bypass - SA-CONTRIB-2026-165

    Drupal · Webform

    Low3.1