Drupal Aggregation Module — known CVE vulnerabilities

Every CVE whose affected-product data names Drupal Aggregation Module, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2008-3001 — CVSS 9.3 (critical): The Aggregation module 5.x before 5.x-4.4 for Drupal allows remote attackers to upload files with arbitrary extensions, and possibly…
• CVE-2008-2999 — CVSS 7.5 (high): Multiple SQL injection vulnerabilities in the Aggregation module 5.x before 5.x-4.4 for Drupal allow remote attackers to execute arbitrary…
• CVE-2008-3000 — CVSS 6.8 (medium): The Aggregation module 5.x before 5.x-4.4 for Drupal, when node access modules are used, does not properly implement access control, which…
• CVE-2008-2998 — CVSS 4.3 (medium): Multiple cross-site scripting (XSS) vulnerabilities in the Aggregation module 5.x before 5.x-4.4 for Drupal allow remote attackers to…