Filtered by vendor Alternativecommerce Subscriptions
Filtered by product Alternativecommerce Subscriptions
Total 1 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2026-9726 2 Alternativecommerce, Drupal 2 Alternativecommerce, Drupal Alternativecommerce (basket) 2026-07-13 9.8 Critical
Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal Drupal AlternativeCommerce (Basket) allows Object Injection. This issue affects Drupal AlternativeCommerce (Basket) versions: from 0.0.0 to 2.1.17.