← Back to CVE search

CVE-2026-10770

Drupal Anti-Spam

Description

Improper Neutralization of Input During Web Page Generation (-Cross-site Scripting-) vulnerability in Drupal Anti-Spam by CleanTalk allows Reflected XSS. This issue affects Anti-Spam by CleanTalk versions: from 0.0.0 to 9.7.1.

CVSS 6.1EPSS 0.181%Risk 0.62
View source
Published
2026-07-10 22:16:38
Affected versions
<=9.7.1
Type
Web application
Last modified
2026-08-06 14:04:15
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N