Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Webform — Vulnerabilities & Security Advisories 20

All 20 CVE vulnerabilities found in Webform, with AI-generated Chinese analysis, references, and POCs.

This page aggregates security weaknesses identified in the Webform product, categorized by vendor advisories and specific vulnerability types. The collection encompasses a comprehensive range of flaws, including cross-site scripting, SQL injection, and privilege escalation issues, covering the product's entire development history from its initial release to the present day. Readers can utilize this resource to track official vendor security advisories, analyze the characteristics of a specific weakness class across different versions, or review the complete vulnerability history of the Webform application to assess historical risk exposure. The data serves as a centralized reference for security professionals seeking to understand the evolution of threats targeting this software without relying on scattered reports or unverified sources. By organizing these entries chronologically and by severity, the page facilitates efficient impact analysis and remediation planning for organizations deploying Webform in their infrastructure. This compilation ensures that all known defects are documented in a structured format, enabling accurate correlation between reported issues and available patches. Users will find detailed descriptions of each vulnerability, affected version ranges, and references to relevant security bulletins, providing a clear picture of the product's security posture over time.

Vendor: Drupal

CVE ID Title CVSS Severity Published
CVE-2026-96360 Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-154 CWE-79 - - 2026-10-22
CVE-2026-96361 Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-155 CWE-79 - - 2026-10-22
CVE-2026-96358 Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-158 CWE-79 - - 2026-10-22
CVE-2026-96362 Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-160 CWE-79 - - 2026-10-22
CVE-2026-96359 Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-159 CWE-79 - - 2026-10-22
CVE-2026-96363 Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-161 CWE-267 - - 2026-10-22
CVE-2026-96367 Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-162 CWE-267 - - 2026-10-22
CVE-2026-96368 Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-163 CWE-79 - - 2026-10-22
CVE-2026-96370 Webform - Moderately critical - Access bypass, Server-side request forgery - SA-CONTRIB-2026-164 CWE-863 - - 2026-10-22
CVE-2026-96371 Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-166 CWE-267 - - 2026-10-22
CVE-2026-96369 Webform - Less critical - Access bypass - SA-CONTRIB-2026-165 CWE-525 - - 2026-10-22
CVE-2026-96372 Webform - Moderately critical - Access bypass - SA-CONTRIB-2026-167 CWE-1220 - - 2026-10-22
CVE-2026-96373 Webform - Moderately critical - Access bypass - SA-CONTRIB-2026-168 CWE-863 - - 2026-10-22
CVE-2026-96366 Webform - Moderately critical - Access bypass - SA-CONTRIB-2026-169 CWE-863 - - 2026-10-22
CVE-2026-96365 Webform - Less critical - Denial of service - SA-CONTRIB-2026-170 CWE-770 - - 2026-10-22
CVE-2026-96357 Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-172 CWE-79 - - 2026-10-22
CVE-2026-96364 Webform - Moderately critical - Access bypass - SA-CONTRIB-2026-171 CWE-799 - - 2026-10-22
CVE-2026-96398 Webform - Less critical - Access bypass - SA-CONTRIB-2026-173 CWE-863 - - 2026-10-22
CVE-2026-96356 Webform - Moderately critical - Access bypass - SA-CONTRIB-2026-174 CWE-863 - - 2026-10-22
CVE-2026-96355 Webform - Critical - Remote Code Execution - SA-CONTRIB-2026-175 CWE-1336 - - 2026-10-22

All 20 known CVE vulnerabilities affecting Webform with full Chinese analysis, references, and POCs where available.