Drupal Geolocation Field module versions prior to 3.15.0 are affected by a critical SQL Injection vulnerability. WissKI module versions prior to 4.2.0 are affected by a critical access bypass vulnerability. Users and administrators are advised to update to fixed versions to mitigate these vulnerabilities.
| Vendor | Product | Versions |
|---|---|---|
| drupal | geolocation field and wisski modules | < 3.15.0 (Geolocation Field), < 4.2.0 (WissKI) |
