Vendor coverage

internationalization_project vulnerabilities

Track published CVEs, severity trends, and remediation context for internationalization_project products.

RSS

Total vulnerabilities

Critical issues

Average CVSS score

4.6

Search results

Filtered vulnerability results

Showing 1-3 of 3 vulnerabilities.

Sort current page

CVE-2026-0748MediumCVSS5.3Published Mar 26, 2026

In the Drupal 7 Internationalization (i18n) module, the i18n_node submodule allows a user with both "Translate content" and "Administer content translations" permissions to view and attach unpublished nodes via the translation UI and its autocomplete widget. This bypasses intended access controls and discloses unpublished node titles and IDs. Exploit affects versions 7.x-1.0 up to and including 7.x-1.35.

Affected vendor

internationalization project

Affected product

internationalization

Coverage

Single affected product entry

CVSS

5.3

MEDIUM

Published

Mar 26, 2026

CVE-2008-1977UnknownCVSS4.3Published Apr 27, 2008

Cross-site request forgery (CSRF) vulnerability in the Internationalization (i18n) Drupal module 5.x before 5.x-2.3 and 5.x-1.1, and 6.x before 6.x-1.0 beta 1, allows remote attackers to change node translation relationships via unspecified vectors.

Affected vendor

localizer project

Affected product

localizer

Coverage

23 affected product entries

CVSS

4.3

UNKNOWN

Published

Apr 27, 2008

CVE-2008-1976UnknownCVSS4.3Published Apr 27, 2008

Multiple cross-site scripting (XSS) vulnerabilities in the Drupal modules (1) Internationalization (i18n) 5.x before 5.x-2.3 and 5.x-1.1 and 6.x before 6.x-1.0 beta 1; and (2) Localizer 5.x before 5.x-3.4, 5.x-2.1, and 5.x-1.11; allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected vendor

localizer project

Affected product

localizer

Coverage

23 affected product entries

CVSS

4.3

UNKNOWN

Published

Apr 27, 2008