To expose data that would otherwise be normally hidden.
The module does not secure settings that are normally only privileged users can administer.
Possible information disclusure of restricted information.
Discloses statistical information about content and hardens possible risks with bespoke user registration forms.
Discloses statistical information about content.
Allows users to abuse the prepopulate fields. Most sites do not expose these forms to untrusted users.
Mixed risks. Upgrade highly recommeded.
Only a risk if non-default environment are configured.
This enables a potential attacker to add, update, or remove their own terms to a site-wide blacklist interferring with the spam filtering on the site.
Potential information disclusure if private fields are being displayed as blocks.
Looking for support for your existing Drupal site?Planning something new?
We would love to help!
Get in touch with us for more details or a free quote for your Drupal project or to organise a meet-up over a coffee.
07 3077 7295 email@example.com Client Portal