2 CVEs

Drupal Frontend Editing Auth and CSRF Flaws

2026-10-30

PHP

CSRF

Drupal

Frontend Editing

Authentication Bypass

Path Traversal

CVE-2026-114541 PATCH

Cross-Site Request Forgery (CSRF) vulnerability in Drupal Frontend Editing allows Cross Site Request Forgery. This issue affects Frontend Editing versions: from 0.0.0 to 1.9.3.

0.1%

EPSS

CVE-2026-114553 PATCH

Incorrect Authorization vulnerability in Drupal Frontend Editing allows Forceful Browsing. This issue affects Frontend Editing versions: from 0.0.0 to 1.9.3.

0.1%

EPSS