{"apiVersion":"1.0","identifier":"CVE-2026-55805","description":"Improper Neutralization of Input During Web Page Generation (-Cross-site Scripting-) vulnerability in Drupal Drupal core allows Stored XSS. This issue affects Drupal core versions: from 0.0.0 to 10.6.13, from 11.3.0 to 11.3.14, from 11.4.0 to 11.4.4, from 0.0.0 to 11.0.*, from 0.0.0 to 11.1.*, from 0.0.0 to 11.2.*.","publishedAt":"2026-08-25T23:17:19","lastModifiedAt":"2026-08-28T15:29:44","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-55805","cvssScore":5.4,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","epssProbability":0.00133,"riskScore":0.55,"affectedProduct":"Drupal","affectedVersions":"<=10.6.13,>=11.3.0,<=11.3.14,>=11.4.0,<=11.4.4,<11.3.0","vulnerabilityType":"Web app","operatingSystems":[],"links":{"self":"https://www.redsauce.net/api/cves/CVE-2026-55805","webPages":{"es":"https://www.redsauce.net/es/cves/CVE-2026-55805","en":"https://www.redsauce.net/en/cves/CVE-2026-55805","fr":"https://www.redsauce.net/fr/cves/CVE-2026-55805","pt":"https://www.redsauce.net/pt/cves/CVE-2026-55805","de":"https://www.redsauce.net/de/cves/CVE-2026-55805","sk":"https://www.redsauce.net/sk/cves/CVE-2026-55805","el":"https://www.redsauce.net/el/cves/CVE-2026-55805"},"source":"https://nvd.nist.gov/vuln/detail/CVE-2026-55805"}}