EUVD-2026-70009
GHSA-3m67-grcr-c75v
Severity by source
AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:N
PR:H reflects mandatory admin access to inject payload; AC:L since injection is straightforward once privileged; S:C and C:H/I:H capture victim session compromise via XSS.
Primary rating from Vendor (drupal).
CVSS VectorVendor: drupal
Lifecycle Timeline
4DescriptionCVE.org
Vulnerability in Drupal Screenshot. This issue affects Screenshot versions: *.*.
AnalysisAI
Cross-site scripting in the Drupal Screenshot contributed module allows a high-privileged authenticated attacker to inject malicious script content that executes in the browser context of other users who view the affected page. The scope-changing CVSS vector (S:C) confirms that the injected payload can compromise sessions or data belonging to users other than the attacker, enabling session hijacking, credential theft, or unauthorized actions on behalf of victims. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires the attacker to hold high-privilege (administrator-level) authenticated access to the Drupal site - PR:H in the CVSS vector confirms this. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS base score is 7.3 with vector AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:N. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | The primary remediation is to apply the updated module version published by the Drupal security team under SA-CONTRIB-2026-102, available at https://www.drupal.org/sa-contrib-2026-102. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours: audit your Drupal deployment to identify if the Screenshot module is installed and determine which administrator/editor accounts have screenshot editing permissions. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
More in Screenshot
View allSame weakness CWE-79 – Cross-site Scripting (XSS)
View allShare
External POC / Exploit Code
Leaving vuln.today