Skip to content
OpenAdvisories
Medium · 5.4 CVE-2026-114553 DRUPAL-CONTRIB-2026-241EUVD-2026-113531GHSA-62hx-4jm7-723g

Frontend Editing - Less critical - Access bypass - SA-CONTRIB-2026-241

Published Oct 30, 2026 · Updated Nov 6, 2026 · Assigned by drupal

Description

Incorrect Authorization vulnerability in Drupal Frontend Editing allows Forceful Browsing. This issue affects Frontend Editing versions: from 0.0.0 to 1.9.3.

Affected products

VendorProductAffectedFixed
Drupal Frontend Editing 0.0.0 – < 1.9.3 1.9.3

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist drupal/frontend_editing < 1.9.3 1.9.3 DRUPAL-CONTRIB-2026-241

Advisories 1

References