CVE-2026-96380

Name of the Vulnerable Software and Affected Versions Drupal CSS Usage Analyzer versions 1.0.0 through 1.0.2

Description A missing authorization issue allows forceful browsing. The module fails to sufficiently protect the '/css-usage-analyzer/save' endpoint against forged or repeated submissions, which could allow a frontend scanner to post unauthorized CSS-usage measurements to the site.

Recommendations Update Drupal CSS Usage Analyzer to a version later than 1.0.2. Restrict access to the '/css-usage-analyzer/save' endpoint to minimize the risk of unauthorized submissions.