CVE-2015-4396: Multiple cross-site request forgery (CSRF) vulnerabilities in the Keyword Research module 6.x-1.x before 6....

Security readout for executives and security teams

This issue affects the Drupal Keyword Research contributed module. A malicious site could cause a logged-in user with the module’s keyword administration permission to create, delete, or reprioritize keywords without intending to. The business impact is likely content and SEO integrity loss rather than system takeover, based on the provided sources. Exposure is limited to Drupal sites using the Keyword Research module 6.x-1.x before 6.x-1.2, especially where privileged keyword administrators use active browser sessions. Treat as a targeted legacy Drupal hygiene issue. Prioritize remediation where the module is installed on public-facing or business-critical sites, but do not escalate as actively exploited based on this bundle alone. Mitigation focus: Upgrade the Keyword Research module to 6.x-1.2 or later if still deployed.; Check Drupal advisory guidance for any additional vendor-recommended remediation.; Restrict the “kwresearch admin site keywords” permission to trusted administrators only..

Prepared

Jun 13, 2026, 22:39 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.