https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-28T09:36:35.406037+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/drupal-contrib-2026-093 DRUPAL-CONTRIB-2026-093 2026-09-28T09:36:35.452755+00:00

Affected: Packagist:https://packages.drupal.org/8: drupal/edit_in_place_field

This module provides formatters to allow in-place editing in a View or other display (full content, teaser...).

The module doesn't sufficiently check access when editing entities. A malicious user could craft requests to allow them to modify any field on any entity.

This vulnerability is mitigated by the fact that an attacker must have a role with the permission "edit in place field editing permission".

 https://vulnerability.circl.lu/vuln/fkie_cve-2026-18985 fkie_cve-2026-18985 2026-09-28T09:36:35.452863+00:00

Incorrect Authorization vulnerability in Drupal Edit in-place field allows Forceful Browsing. This issue affects Edit in-place field versions: from 0.0.0 to 2.1.1.

 https://vulnerability.circl.lu/vuln/ghsa-xgjg-vwwh-m3x2 GHSA-xgjg-vwwh-m3x2 2026-09-28T09:36:35.452918+00:00

Incorrect Authorization vulnerability in Drupal Edit in-place field allows Forceful Browsing. This issue affects Edit in-place field versions: from 0.0.0 to 2.1.1.