Drupal
Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-166
SA-CONTRIB-2026-166 Sep 23, 2026 Source: Vendor
Imported by the Drupal advisory catcher from https://www.drupal.org/sa-contrib-2026-166. 1 reporter(s), 6 fixer(s). Draft. Review before publishing.
Source of record
The credited names below are quoted verbatim from the vendor's own advisory:
https://www.drupal.org/sa-contrib-2026-166
Are you credited here?
Sign in and claim your line: it is yours immediately, no review queue.
The name the vendor printed stays next to your handle for anyone to check against the advisory above,
and any member who thinks a claim is wrong can refute it.
Credited
6 lines
Showing 1–6 of 6
CVE-2026-96371
BR2026-0000-015474
unclaimed
Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-166
Credited as Pierre Rudloff (prudloff) of the Drupal Security Team
CVE-2026-96371
BR2026-0000-015475
unclaimed
Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-166
Credited as Dan Chadwick (danchadwick)
CVE-2026-96371
BR2026-0000-015476
unclaimed
Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-166
Credited as Jacob Rockowitz (jrockowitz)
CVE-2026-96371
BR2026-0000-015477
unclaimed
Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-166
Credited as Lee Rowlands (larowlan) of the Drupal Security Team
CVE-2026-96371
BR2026-0000-015478
unclaimed
Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-166
Credited as Liam Morland (liam morland)
CVE-2026-96371
BR2026-0000-015479
unclaimed
Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-166
Credited as Juraj Nemec (poker10) of the Drupal Security Team