CVE-2026-96363

Published Oct 22, 2026

Last updated 2 days ago

Overview

Description
Privilege Defined With Unsafe Actions vulnerability in Drupal Webform allows Stored XSS. This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1.
Source
mlhess@drupal.org
NVD status
Awaiting Analysis

Weaknesses

mlhess@drupal.org
CWE-267

Social media

Hype score
Not currently trending

  1. 🚨 CVE-2026-96363 in Drupal Contributed Modules: Code Execution, Privilege Escalation and XSS in WID-SEC-2026-3554 Critical Vulnerability Alert! Drupal contributed modules is affected by CVE-2026-96363. 🔍 Identify Targets via ZoomEye: Search Dork: app="Drupal" Exposure:

    @zoomeyebot

    27 Sept 2026

    43 Impressions

    0 Retweets

    1 Like

    0 Bookmarks

    0 Replies

    0 Quotes

References

Sources include official advisories and independent security research.