Unrated severityNVD Advisory· Published Aug 25, 2026
CVE-2026-15917
CVE-2026-15917
Description
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Drupal core allows Cross-Site Scripting (XSS). This issue affects Drupal core versions: from 11.3.0 to 11.3.14, from 11.4.0 to 11.4.4, from 0.0.0 to 11.2.*.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- Range: 11.3.0 to 11.3.14, 11.4.0 to 11.4.4, 0.0.0 to 11.2.*
Patches
Vulnerability mechanics
References
1News mentions
1- Drupal core - Moderately critical - Cross-site scripting - SA-CORE-2026-011Drupal Security Advisories · Jul 15, 2026