p PatchFirst

PatchFirst · Latest vulnerabilities

drupal/sector vulnerabilities

Vulnerabilities published for drupal/sector in the last 30 days: 1. Listed in the KEV catalogue: 0.

RSS ↗
Filter vulnerabilities
Clear filters

Vulnerabilities: 1

  1. CVE-2026-107260

    Not ratedFix available

    DRUPAL-CONTRIB-2026-229

    Sector is a distribution targeted towards Drupal site builders and site owners who are looking for a fully configured Drupal project out of the box. A module specific to this distribution doesn't sufficiently sanitize media names, potentially leading to an XSS exploit. This vulnerability is mitigated by the fact that an attacker must have a role with the ability to create or edit a media entity.

    drupal/sectorPHP
    • Update to 10.3.3
    • Update to 10.4.2
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →