CVE-2026-114541
Low risk· EPSS 1%Exploitation Probability (EPSS)
Low risk1th percentile - higher than 1% of all known CVEs
Summary
The Drupal Frontend Editing module contains a Cross-Site Request Forgery (CSRF) vulnerability that allows an attacker to force unwanted actions on behalf of a logged-in user. This issue affects versions from 0.0.0 to 1.9.3.
Risk Assessment
An attacker could trick an administrator or editor into performing unintended operations, such as changing content or configuration. This may lead to data modification or partial site takeover.
Recommendation
Update the Frontend Editing module to a version later than 1.9.3. Ensure forms in the module include CSRF tokens.
Other vulnerabilities in Drupal Frontend Editing
Original NVD description (English source)
Cross-Site Request Forgery (CSRF) vulnerability in Drupal Frontend Editing allows Cross Site Request Forgery. This issue affects Frontend Editing versions: from 0.0.0 to 1.9.3.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS