CVE-2026-84921
This module enables you to delete Webform submissions in bulk using a specified date range. The module doesn't sufficiently restrict access to the de...
Original description
The description as published by the source.
This module enables you to delete Webform submissions in bulk using a specified date range.
The module doesn't sufficiently restrict access to the delete form.
A separate PHP fatal error issue may prevent exploitation in practice on Drupal 10+.
Affected packages
Packagist:https://packages.drupal.org/8
drupal/webform_submissions_delete
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.0"}],"database_specific":{"constraint":"<1.2.0"}}]
References
- web drupal.org