Medium severity5.4NVD Advisory· Published Jul 10, 2026· Updated Aug 6, 2026
CVE-2026-15084
CVE-2026-15084
Description
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal UI Patterns (SDC in Drupal UI) allows Stored XSS. This issue affects UI Patterns (SDC in Drupal UI) versions: from 2.0.0 to 2.0.17.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2Patches
Vulnerability mechanics
References
1- www.drupal.org/sa-contrib-2026-075nvdVendor Advisory
News mentions
1- Drupal: Ten Security Advisories Released Together on July 8, 2026Vypr Intelligence · Jul 8, 2026