Skip to content
OpenAdvisories
Medium · 4.8 CVE-2026-114541 DRUPAL-CONTRIB-2026-240EUVD-2026-113532GHSA-cg9m-x97q-xvqh

Frontend Editing - Moderately critical - Cross-Site Request Forgery (CSRF) - SA-CONTRIB-2026-240

Published Oct 30, 2026 · Updated Nov 6, 2026 · Assigned by drupal

Description

Cross-Site Request Forgery (CSRF) vulnerability in Drupal Frontend Editing allows Cross Site Request Forgery. This issue affects Frontend Editing versions: from 0.0.0 to 1.9.3.

Affected products

VendorProductAffectedFixed
Drupal Frontend Editing 0.0.0 – < 1.9.3 1.9.3

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist drupal/frontend_editing < 1.9.3 1.9.3 DRUPAL-CONTRIB-2026-240

Advisories 1

References