CVE-2026-81167

Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Address Suggestion allows Cross-Site Scripting XSS. This issue affects Address Suggestion versions: from 0.0.0 to 1.0.25...

CVE-2026-81167

Drupal Address Suggestion (a contributed module providing address autocomplete via configured providers) is affected by a cross-site scripting (XSS) vulnerability in versions 0.0.0 through 1.0.25 . The module fails to sufficiently sanitize address suggestion data returned by configured providers....

EUVD-2026-70008

Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Address Suggestion allows Cross-Site Scripting XSS. This issue affects Address Suggestion versions: from 0.0.0 to 1.0.25...

DRUPAL-CONTRIB-2026-103

The Address Suggestion module provides address autocomplete functionality using configured address providers. The module doesn't sufficiently sanitize address suggestion data returned by configured providers, which can lead to a cross-site scripting XSS vulnerability. This vulnerability is...

PT-2026-82370

Name of the Vulnerable Software and Affected Versions Drupal Address Suggestion versions 0.0.0 through 1.0.25 Description Improper neutralization of input during web page generation allows for Cross-Site Scripting XSS. The Address Suggestion module, which provides address autocomplete functionali...