low3.8
CVE-2026-107306
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Menu Link Attributes allows Stored XSS.
Impact
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Menu Link Attributes allows Stored XSS. This issue affects Menu Link Attributes versions: from 0.0.0 to 1.8.0.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Drupal | Menu Link Attributes | from 0.0.0 before 1.8.0 |