VYPR
← All advisories
Low severity3.1NVD Advisory· Published Oct 22, 2026· Updated Oct 22, 2026

CVE-2026-84911

CVE-2026-84911

Description

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal AI (Artificial Intelligence) allows Stored XSS. This issue affects AI (Artificial Intelligence) versions: from 0.0.0 to 1.3.13, from 1.4.0 to 1.4.8.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

1
  • Drupal/AIllm-create
    Range: 0.0.0 - 1.3.13, 1.4.0 - 1.4.8

Patches

Vulnerability mechanics

References

1

News mentions

1