CVE-2026-81162
CVE-2026-81162 · DXPR Builder: The AI Visual Page Builder for Drupal - Moderately critical - Information Disclosure - SA-CONTRIB-2026-112
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Insertion of Sensitive Information Into Sent Data vulnerability in Drupal DXPR Builder: The Best Editing (AI) Experience for Drupal allows Forceful Browsing. This issue affects DXPR Builder: The Best Editing (AI) Experience for Drupal versions: from 0.0.0 to 2.8.1.
CVSS 5.3 · Medium · EPSS 0.3% · Fix available
- Published
- Updated
Stack: php
Affected products and versions
dxpr builder: the best editing (ai) experience for drupal
- Versions
- ≥ 0.0.0, < 2.8.1: Affected (semver)
Update to 2.8.1
drupal/dxpr_builder Packagist:https://packages.drupal.org/8
- Affected ranges
- ECOSYSTEM: < 2.8.1
Update to 2.8.1