CVE-2026-107264

CVE-2026-107264 · DRUPAL-CONTRIB-2026-203

This page contains facts from public vulnerability sources. Check the original advisory before updating.

The Inline Formatter Field module allows site builders to template and style entities with a field. This module does not properly protect against template injection when parsing, allowing users to render protected data or execute unsafe Twig commands.

Fix available

Published

2026-10-07T16:27:03Z

Updated

2026-10-07T20:15:05.849532107Z

Stack: php

Check your server →