Threats tagged 'drupal-contrib-2026-266'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	–	CVE-2026-118545drupal/ai · This module enables you to use AI on the website Medium2026-10-28GCVE DatabaseCVE-2026-118545 The Drupal AI module contains a cross-site scripting (XSS) vulnerability due to insufficient restrictions on HTML rendering. Exploitation requires the attacker to have access to a text format that permits HTML rendering. Fixed versions 1.4.11 and 1.5.2 address this issue. Vulnerability #drupal-contrib-2026-266 #packagist-https-packages-drupa	GCVE Database	2026-10-28

Page 1 of 1