Threats tagged 'ghsa-pj54-wh4v-jqcw'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	–	CVE-2026-118560Drupal Commerce · Cross-site Scripting High2026-10-30GCVE DatabaseCVE-2026-118560 A Cross-Site Scripting (XSS) vulnerability exists in Drupal Commerce Stripe versions 2.0.0 through 2.2.3 due to improper neutralization of input during web page generation. This flaw could allow an attacker to inject malicious scripts into web pages viewed by other users. Report on CVE-2026-118560 Vulnerability CWE-79 #ghsa-pj54-wh4v-jqcw	GCVE Database	2026-10-30

Page 1 of 1