CVE-2026-114541: Frontend Editing - Moderately critical - Cross-Site Request Forgery (CSRF) - SA-CONTRIB-2026-240
Published Oct 30, 2026
·Updated
Cross-Site Request Forgery (CSRF) vulnerability in Drupal Frontend Editing allows Cross Site Request Forgery. This issue affects Frontend Editing versions: from 0.0.0 to 1.9.3.
Affected Software
1 affected component
Drupal Frontend Editing>=0.0.0<=1.9.3
Event History
Oct 30, 2026
CVE Published
via MITRE·03:09 AM
Data Sourced
via MITRE·03:09 AM
DescriptionWeakness
Data Sourced
via OSV·03:09 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·04:18 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Which versions are affected?
Frontend Editing versions from 0.0.0 through 1.9.3 are affected.
2
What type of attacker interaction is involved?
The issue is a cross-site request forgery vulnerability, meaning an attacker can cause a victim’s browser to submit requests in the affected application context.