Vulnerabilities
Summary — last 7 days
New vulnerabilities5,297▲ 2,596 vs. last week
Critical / high2,970▲ 1,669 vs. last week
New active exploitation (KEV)6▼ 2 vs. last week
Unscored (no CVSS)242▲ 69 vs. last week
1 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Modified | Medium (4.3) | 1.8% | — | Inline Entity Form Project Inline Entity Form | 8/18/2015 | 6/17/2026 | Cross-site scripting (XSS) vulnerability in the Inline Entity Form module 7.x-1.x before 7.x-1.6 for Drupal allows remote authenticated users with permission to create or edit fields to inject arbitrary web script or HTML via unspecified vectors. |