Medium severity5.4NVD Advisory· Published Jul 10, 2026· Updated Aug 6, 2026
CVE-2026-15082
CVE-2026-15082
Description
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Siteimprove Analytics allows Cross-Site Scripting (XSS). This issue affects Siteimprove Analytics versions: from 0.0.0 to 2.0.1.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- cpe:2.3:a:ijsbrandy:siteimprove_analytics:*:*:*:*:*:drupal:*:*Range: <2.0.1
Patches
Vulnerability mechanics
References
1- www.drupal.org/sa-contrib-2026-073nvdVendor Advisory
News mentions
1- Drupal: Ten Security Advisories Released Together on July 8, 2026Vypr Intelligence · Jul 8, 2026