Threats tagged 'ghsa-qrww-563x-vvf9'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	–	CVE-2026-118576Drupal Stage · Cross-site Scripting High2026-10-30GCVE DatabaseCVE-2026-118576 A Cross-Site Scripting (XSS) vulnerability exists in the Drupal Stage File Proxy module due to improper neutralization of input during web page generation. This affects versions from 0.0.0 to 3.1.7 and from 4.0.0 to 4.0.1. The vulnerability allows injection of malicious scripts into web pages generated by the module. Report on CVE-2026-118576 Vulnerability CWE-79 #ghsa-qrww-563x-vvf9	GCVE Database	2026-10-30

Page 1 of 1