Unrated severityNVD Advisory· Published Feb 4, 2026· Updated Feb 6, 2026
AT Internet SmartTag - Moderately critical - Cross-site Scripting - SA-CONTRIB-2026-003
CVE-2026-0946
Description
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal AT Internet SmartTag allows Cross-Site Scripting (XSS).This issue affects AT Internet SmartTag: from 0.0.0 before 1.0.1.
Affected products
2- Range: <1.0.1
- Drupal/AT Internet SmartTagv5Range: 0.0.0
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1News mentions
0No linked articles in our index yet.