Skip to content
OpenAdvisories

Product · Drupal

Term Reference Tree

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.1
    CVE-2026-4093

    Stored XSS in Drupal 7 Term Reference Tree module (token display templates and term labels)

    In the Drupal 7 Term Reference Tree module, two stored XSS vectors exist in the widget/formatter rendering pipeline. Vector A (token display templates): When the Token module is enabled and token display templates are configured, attacker-controlled token out…

    Drupal Term Reference Tree