medium5.4
CVE-2026-107252
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal MathJax: LaTeX for Drupal allows Cross-Site Script…
Impact
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal MathJax: LaTeX for Drupal allows Cross-Site Scripting (XSS). This issue affects MathJax: LaTeX for Drupal versions: from 0.0.0 to 4.1.2.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Drupal | MathJax: LaTeX For Drupal | from 0.0.0 before 4.1.2 |