drupal Gin Admin Theme vulnerabilities

Latest drupal Gin Admin Theme CVEs

Newest publication first

1. CVE-2026-110738 Gin Admin Theme - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-219

   Published 2026-10-30

   Medium·CVSS 6.5 EPSS 0.16%

   Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Gin Admin Theme allows Cross-Site Scripting (XSS). This issue affects Gin Admin Theme versions: from 0.0.0 to 4.1.4, from 5.0.0 to 5.0.16.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.