medium6.1
CVE-2026-13231
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Advanced Content Feedback (aka admin_feedback) all…
Impact
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Advanced Content Feedback (aka admin_feedback) allows Stored XSS. This issue affects Advanced Content Feedback (aka admin_feedback) versions: from 0.0.0 to 2.8.0.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Anuaralfetahe | Advanced Content Feedback | before 2.8 |