Single Content Sync

3 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2026-118561 Oct 30, 03:08 PHP PATCH Monitor

External Control of File Name or Path vulnerability in Drupal Single Content Sync allows Path Traversal. This issue affects Single Content Sync versions: from 0.0.0 to 1.4.19.

PHP Path Traversal Drupal Single Content Sync

NVD

EPSS

0.1%

CVE-2026-118562 Oct 30, 03:08 PHP PATCH This Week

Deserialization of Untrusted Data vulnerability in Drupal Single Content Sync allows Object Injection. This issue affects Single Content Sync versions: from 0.0.0 to 1.4.19.

Deserialization Code Injection Drupal Single Content Sync

NVD

EPSS

0.3%

CVE-2025-48009 May 21, 17:15 PHP LOW PATCH Monitor

Missing Authorization vulnerability in Drupal Single Content Sync allows Functionality Misuse.0.0 before 1.4.12. Rated low severity (CVSS 3.1), this vulnerability is remotely exploitable. No vendor patch available.

Authentication Bypass Drupal Single Content Sync

NVD

CVSS 3.1

3.1

EPSS

0.1%

CVE-2026-118561 PHP

EPSS 0%

PATCH Monitor

External Control of File Name or Path vulnerability in Drupal Single Content Sync allows Path Traversal. This issue affects Single Content Sync versions: from 0.0.0 to 1.4.19.

PHP Path Traversal Drupal +1

NVD

CVE-2026-118562 PHP

EPSS 0%

PATCH This Week

Deserialization of Untrusted Data vulnerability in Drupal Single Content Sync allows Object Injection. This issue affects Single Content Sync versions: from 0.0.0 to 1.4.19.

Deserialization Code Injection Drupal +1

NVD

CVE-2025-48009 PHP

EPSS 0% CVSS 3.1

LOW PATCH Monitor

Authentication Bypass Drupal Single Content Sync

NVD