vendor
Drupal
891 CVEs · 5 exploited in the wild
Two views of the same 891 CVEs: first by weakness class, then by product. Each group adds up to all of them, so a CVE is one square in each. Each square stands for CVEs. Cross-site Scripting tops its classes (33%).
Open Drupal's vendor page- tops it
- Cross-site Scripting
ringed squares, at the foot of a strip: how many of its records CyberSIXT has written about (a count, not which ones; a record that was says so when you point at it)
Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.