← Voltar à pesquisa de CVEs

CVE-2026-2349

Drupal UI Icons

Descrição

Improper Neutralization of Input During Web Page Generation (-Cross-site Scripting-) vulnerability in Drupal UI Icons allows Cross-Site Scripting (XSS).This issue affects UI Icons: from 0.0.0 before 1.0.1, from 1.1.0 before 1.1.1.

CVSS 6.1EPSS 0.149%Risco 0.62
Ver fonte
Publicação
2026-03-25 16:16:21
Versões afetadas
<1.0.1,>=1.1.0,<1.1.1
Tipo
Core software
Vetor
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N