High severity7.4NVD Advisory· Published Jul 10, 2026· Updated Aug 6, 2026
CVE-2026-15081
CVE-2026-15081
Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Drupal Location Selector allows SQL Injection. This issue affects Location Selector versions: from 0.0.0 to 1.3.0.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- Package: https://wordpress.org/plugins/drupal
- cpe:2.3:a:handkerchief:location_selector:*:*:*:*:*:drupal:*:*Range: <1.3
Patches
Vulnerability mechanics
References
1- www.drupal.org/sa-contrib-2026-072nvdVendor Advisory
News mentions
2- Drupal: Ten Security Advisories Released Together on July 8, 2026Vypr Intelligence · Jul 8, 2026
- Drupal: Five Security Advisories Disclosed Together on July 8, 2026Vypr Intelligence · Jul 8, 2026