PatchTheCVE: open socialhttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2025-48921: Cross-Site Request Forgery (CSRF) vulnerability in Drupal Open Social allows Cross Site Request Forgery.This ihttps://patchthecve.com/cve/CVE-2025-48921.htmlhttps://patchthecve.com/cve/CVE-2025-48921.htmlWed, 17 Jun 2026 09:30:29 +0000HIGH 8.8: Cross-Site Request Forgery (CSRF) vulnerability in Drupal Open Social allows Cross Site Request Forgery.This issue affects Open Social: from 0.0.0 before 12.3.14, from 12.4.0 before 12.4.13.CVE-2025-31686: Missing Authorization vulnerability in Drupal Open Social allows Forceful Browsing.This issue affects Open Sochttps://patchthecve.com/cve/CVE-2025-31686.htmlhttps://patchthecve.com/cve/CVE-2025-31686.htmlWed, 17 Jun 2026 09:10:46 +0000HIGH 8.1: Missing Authorization vulnerability in Drupal Open Social allows Forceful Browsing.This issue affects Open Social: from 0.0.0 before 12.3.11, from 12.4.0 before 12.4.10.CVE-2025-31685: Missing Authorization vulnerability in Drupal Open Social allows Forceful Browsing.This issue affects Open Sochttps://patchthecve.com/cve/CVE-2025-31685.htmlhttps://patchthecve.com/cve/CVE-2025-31685.htmlWed, 17 Jun 2026 09:10:46 +0000CRITICAL 9.1: Missing Authorization vulnerability in Drupal Open Social allows Forceful Browsing.This issue affects Open Social: from 0.0.0 before 12.3.11, from 12.4.0 before 12.4.10.CVE-2024-13312: Missing Authorization vulnerability in Drupal Open Social allows Forceful Browsing.This issue affects Open Sochttps://patchthecve.com/cve/CVE-2024-13312.htmlhttps://patchthecve.com/cve/CVE-2024-13312.htmlWed, 17 Jun 2026 07:01:45 +0000MEDIUM 5.3: Missing Authorization vulnerability in Drupal Open Social allows Forceful Browsing.This issue affects Open Social: from 11.8.0 before 12.3.10, from 12.4.0 before 12.4.9.CVE-2024-13274: Improper Control of Interaction Frequency vulnerability in Drupal Open Social allows Functionality Misuse.Thishttps://patchthecve.com/cve/CVE-2024-13274.htmlhttps://patchthecve.com/cve/CVE-2024-13274.htmlWed, 17 Jun 2026 07:01:39 +0000MEDIUM 5.3: Improper Control of Interaction Frequency vulnerability in Drupal Open Social allows Functionality Misuse.This issue affects Open Social: from 0.0.0 before 12.3.8, from 12.4.0 before 12.4.5.CVE-2024-13273: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Ohttps://patchthecve.com/cve/CVE-2024-13273.htmlhttps://patchthecve.com/cve/CVE-2024-13273.htmlWed, 17 Jun 2026 07:01:39 +0000MEDIUM 5.4: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Open Social allows Cross-Site Scripting (XSS).This issue affects Open Social: from 0.0.0 before 12.3.8, from 12.4.0 before 12.4.5, from 13.0.0 before 13.0.0-alpha11.CVE-2024-13241: Improper Authorization vulnerability in Drupal Open Social allows Collect Data from Common Resource Locations.https://patchthecve.com/cve/CVE-2024-13241.htmlhttps://patchthecve.com/cve/CVE-2024-13241.htmlWed, 17 Jun 2026 07:01:33 +0000CRITICAL 9.1: Improper Authorization vulnerability in Drupal Open Social allows Collect Data from Common Resource Locations.This issue affects Open Social: from 0.0.0 before 12.0.5.CVE-2024-13240: Improper Access Control vulnerability in Drupal Open Social allows Collect Data from Common Resource Locationshttps://patchthecve.com/cve/CVE-2024-13240.htmlhttps://patchthecve.com/cve/CVE-2024-13240.htmlWed, 17 Jun 2026 07:01:33 +0000HIGH 7.5: Improper Access Control vulnerability in Drupal Open Social allows Collect Data from Common Resource Locations.This issue affects Open Social: from 0.0.0 before 12.05.