CSRF in Drupal Theme Negotiation By Rules

CVE-2026-3211

Cross-Site Request Forgery (CSRF) vulnerability in Drupal Theme Negotiation by Rules allows Cross Site Request Forgery.This issue affects Theme Negotiation by Rules: from 0.0.0 before 1.2.1.

Vulnerability class: CSRF (Cross-Site Request Forgery)

EPSS: 0.000 (6.0th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

References