DRUPAL-CONTRIB-2026-240: Frontend Editing - Moderately critical - Cross-Site Request Forgery (CSRF) - SA-CONTRIB-2026-240
Published Oct 30, 2026
·Updated
Cross-Site Request Forgery (CSRF) vulnerability in Drupal Frontend Editing allows Cross Site Request Forgery. This issue affects Frontend Editing versions: from 0.0.0 to 1.9.3.
Affected Software
1 affected component
Drupal Frontend Editing>=0.0.0<=1.9.3
Event History
Oct 30, 2026
CVE Published
via OSV·03:09 AM
Data Sourced
via OSV·03:09 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Which versions should be considered affected?
Drupal Frontend Editing versions from 0.0.0 through 1.9.3 are affected.
2
What level of access does an attacker need to exploit this issue?
The vector indicates network-based exploitation with no attacker privileges or user interaction required. The attack complexity is rated high.