Known Vulnerabilities for Web Links by Drupal
Listed below are 10 of the newest known vulnerabilities associated with "Web Links" by "Drupal".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-105128 json | LaraDashboard before 1.4.8 contains an open redirect vulnerability that allows remote attackers to redirect users by supplyin... | Not Provided | 2026-10-04 | 2026-10-03 |
| CVE-2026-104477 json | Showdown through 2.1.0 contains a cross-site scripting vulnerability in the makehtml link and image subparsers, which fail to... | Not Provided | 2026-10-03 | 2026-10-02 |
| CVE-2026-104473 json | YesWiki before 4.5.3 contains multiple reflected cross-site scripting vulnerabilities that allow remote attackers to inject J... | Not Provided | 2026-10-02 | 2026-10-02 |
| CVE-2026-104468 json | YesWiki before 4.6.7 contains an insufficient session expiration vulnerability that allows attackers to reuse old password re... | Not Provided | 2026-10-02 | 2026-10-02 |
| CVE-2026-104465 json | YesWiki before 4.6.7 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject ... | Not Provided | 2026-10-02 | 2026-10-02 |
| CVE-2026-104464 json | YesWiki before 4.6.7 contains a server-side request forgery vulnerability that allows unauthenticated attackers to make serve... | Not Provided | 2026-10-02 | 2026-10-02 |
| CVE-2026-104453 json | YesWiki before 4.6.7 contains a cross-site request forgery vulnerability in the admintag action that allows attackers to dele... | Not Provided | 2026-10-02 | 2026-10-02 |
| CVE-2026-104448 json | YesWiki before 4.6.7 contains a cross-site request forgery vulnerability in the ajaxdeletepage handler, which permanently del... | Not Provided | 2026-10-02 | 2026-10-02 |
| CVE-2026-103923 json | KaTeX is a fast, easy-to-use JavaScript library for TeX math rendering on the web. From 0.11.0 until 0.18.2, KaTeX uses ordin... | Not Provided | 2026-10-01 | 2026-10-01 |
| CVE-2026-103754 json | A flaw was found in ansible-runner. The unstream_dir() function, which receives and extracts a streamed zip archive on the wo... | Not Provided | 2026-10-01 | 2026-10-01 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Drupal | Web Links | 7.x-1.0 | |||
| Application | Drupal | Web Links | 7.x-1.0 | |||
| Application | Drupal | Web Links | 7.x-1.0 | |||
| Application | Drupal | Web Links | 7.x | |||
| Application | Drupal | Web Links | 6.x-2.6 | |||
| Application | Drupal | Web Links | 6.x-2.5 | |||
| Application | Drupal | Web Links | 6.x-2.4 | |||
| Application | Drupal | Web Links | 6.x-2.3 | |||
| Application | Drupal | Web Links | 6.x-2.2 | |||
| Application | Drupal | Web Links | 6.x-2.1 | |||
| Application | Drupal | Web Links | 6.x-2.0 | |||
| Application | Drupal | Web Links | 6.x-2.0 | |||
| Application | Drupal | Web Links | 6.x-2.0 | |||
| Application | Drupal | Web Links | 6.x-2.0 | |||
| Application | Drupal | Web Links | 6.x-2.0 | |||
| Application | Drupal | Web Links | 6.x-2.0 | |||
| Application | Drupal | Web Links | 6.x-2.0 | |||
| Application | Drupal | Web Links | 6.x-2.0 | |||
| Application | Drupal | Web Links | 6.x-2.0 | |||
| Application | Drupal | Web Links | 6.x-2.0 |