The Drupal AI module contains a vulnerability where insufficient validation of Markdown links under certain conditions can lead to cross-site scripting (XSS). This flaw allows attackers to inject malicious scripts via Markdown links. Fixed versions 1.4.11 and 1.5.2 address this issue.