Skip to content

Product

drupal realname vulnerabilities

2 published CVES affecting drupal realname, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
2
Critical
0
High
0
Medium
1
Low
0
Unscored
1
CISA KEV
0

Latest drupal realname CVEs

Newest publication first

  1. CVE-2012-2298 Multiple cross-site scripting (XSS) vulnerabilities in the RealName module 6.x-1.x before 6.x-1.5 for Drupal allow remote attackers to inject arbitrary web script or HTML via vectors related to (1) "u...

    Published
    MediumCVSS 4.3 EPSS 2.4%

    Multiple cross-site scripting (XSS) vulnerabilities in the RealName module 6.x-1.x before 6.x-1.5 for Drupal allow remote attackers to inject arbitrary web script or HTML via vectors related to (1) "user names in page titles" and (2) "autocomplete callbacks."

  2. CVE-2026-126745 This module enables you to display users by a configurable "real name" pattern built from tokens, instead of by their username. The module does not sufficiently sanitize user input used in name patter...

    Unknown

    This module enables you to display users by a configurable "real name" pattern built from tokens, instead of by their username. The module does not sufficiently sanitize user input used in name patterns. A user can place Twig syntax in their own profile data and have it evaluated...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.