CVE-2026-18985

Name of the Vulnerable Software and Affected Versions Edit in-place field versions 0.0.0 through 2.1.1

Description An incorrect authorization issue allows forceful browsing when editing entities. The module fails to sufficiently verify access rights, enabling a malicious user to craft requests to modify any field on any entity. This issue is mitigated if the attacker lacks the "edit in place field editing permission" role.

Recommendations Update Edit in-place field to a version later than 2.1.1.