Live › vulnerability › CVE-2026-114541
The Drupal Frontend Editing module has a cross-site request forgery flaw in versions 0.0.0 through 1.9.3. A malicious page can make a logged-in user's browser send requests to the site that the user did not intend.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-30 04:28 UTC. All times on this page are UTC.
Sites running the Drupal Frontend Editing module at version 1.9.3 or earlier are affected. Sites that do not install the module are not exposed. The sources do not describe the exact editing actions reachable or required user roles.
No product ranges from the sources yet.
drush pm:list --filter=frontend_editing or the Extend page).1.9.3 (the sources do not name the fixed version).Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Cross-Site Request Forgery (CSRF) vulnerability in Drupal Frontend Editing allows Cross Site Request Forgery. This issue affects Frontend Editing versions: from 0.0.0 to 1.9.3.
This page as .md · .json · in your agent: get_signal("CVE-2026-114541")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.