medium5.4
CVE-2026-107265
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Leaflet allows Stored XSS.
Impact
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Leaflet allows Stored XSS. This issue affects Leaflet versions: from 0.0.0 to 10.4.13.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Drupal | Leaflet | from 0.0.0 before 10.4.13 |