CVE-2026-96367 | Drupal Webform Plugin up to 6.2.11/6.3.0 cross site scripting

October 22, 2026 Yanac

A vulnerability categorized as problematic has been discovered in Drupal Webform Plugin up to 6.2.11/6.3.0. Affected is an unknown function. The manipulation results in cross site scripting.

This vulnerability is known as CVE-2026-96367. It is possible to launch the attack remotely. No exploit is available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More