This vulnerability in Drupal's AI SEO/GEO Analyzer module (version 0.0.0) involves improper input sanitization leading to stored cross-site scripting (CWE-79). An attacker could inject malicious scripts that are stored and later executed in the context of users visiting affected pages. The vulnerability was published on July 10, 2026, but no CVSS score or vendor remediation information is provided. The affected product is not a cloud service, and no known exploits have been reported.

Successful exploitation could allow an attacker to execute arbitrary scripts in the context of users' browsers, potentially leading to session hijacking, defacement, or other malicious actions depending on the context of the injected script. However, no known active exploits have been reported, and the impact is limited to the affected module version 0.0.0.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider disabling or removing the affected AI SEO/GEO Analyzer module version 0.0.0 to mitigate risk.