CVE-2026-13231

The Drupal Advanced Content Feedback (aka admin_feedback) module, versions 0.0.0 to 2.8.0 , is vulnerable to Stored Cross-site Scripting (XSS) . The root cause is the insufficient sanitization of administrator-configured response messages, specifically the "Yes response" , "No response" , and cus...

CVE-2026-13231

Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Advanced Content Feedback aka adminfeedback allows Stored XSS. This issue affects Advanced Content Feedback aka adminfeedback versions: from 0.0.0 to 2.8.0...