Drupal
Entity Browser - Moderately critical - Cross site scripting - SA-CONTRIB-2026-094
SA-CONTRIB-2026-094 Aug 5, 2026 Source: Vendor
Imported by the Drupal advisory catcher from https://www.drupal.org/sa-contrib-2026-094. 1 reporter(s), 3 fixer(s). Draft. Review before publishing.
Source of record
The credited names below are quoted verbatim from the vendor's own advisory:
https://www.drupal.org/sa-contrib-2026-094
Are you credited here?
Sign in and claim your line: it is yours immediately, no review queue.
The name the vendor printed stays next to your handle for anyone to check against the advisory above,
and any member who thinks a claim is wrong can refute it.
Credited
3 lines
Showing 1–3 of 3
CVE-2026-18986
BR2026-0000-008798
unclaimed
Entity Browser - Moderately critical - Cross site scripting - SA-CONTRIB-2026-094
Credited as Pierre Rudloff (prudloff) of the Drupal Security Team
CVE-2026-18986
BR2026-0000-008799
unclaimed
Entity Browser - Moderately critical - Cross site scripting - SA-CONTRIB-2026-094
Credited as Julian Pustkuchen (anybody)
CVE-2026-18986
BR2026-0000-008800
unclaimed
Entity Browser - Moderately critical - Cross site scripting - SA-CONTRIB-2026-094
Credited as Sascha Grossenbacher (berdir)