Lucene search
K

9 matches found

RedhatCVE
RedhatCVE
added 2026/03/26 9:42 p.m.0 views

CVE-2026-3528

A flaw was found in Calculation Fields. This vulnerability, categorized as an Improper Neutralization of Input During Web Page Generation, allows a remote attacker to inject malicious scripts. This Cross-site Scripting XSS can lead to the execution of unauthorized code in a user's web browser,...

6AI score0.00013EPSS
Exploits0References2
EUVD
EUVD
added 2026/03/26 9:31 p.m.1 views

EUVD-2026-16381

Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Calculation Fields allows Cross-Site Scripting XSS.This issue affects Calculation Fields: from 0.0.0 before 1.0.4...

5.8AI score0.00013EPSS
Exploits0References2
NVD
NVD
added 2026/03/26 9:17 p.m.1 views

CVE-2026-3528

Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Calculation Fields allows Cross-Site Scripting XSS.This issue affects Calculation Fields: from 0.0.0 before 1.0.4...

6.1CVSS0.00013EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/03/26 8:3 p.m.18 views

CVE-2026-3528 Calculation Fields - Moderately critical - Cross-site Scripting - SA-CONTRIB-2026-023

Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Calculation Fields allows Cross-Site Scripting XSS.This issue affects Calculation Fields: from 0.0.0 before 1.0.4...

0.00013EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/03/26 8:3 p.m.0 views

CVE-2026-3528

Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Calculation Fields allows Cross-Site Scripting XSS.This issue affects Calculation Fields: from 0.0.0 before 1.0.4...

5.8AI score0.00013EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2026/03/26 8:3 p.m.0 views

CVE-2026-3528 Calculation Fields - Moderately critical - Cross-site Scripting - SA-CONTRIB-2026-023

Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Calculation Fields allows Cross-Site Scripting XSS.This issue affects Calculation Fields: from 0.0.0 before 1.0.4...

5.9AI score0.00013EPSS
Exploits0References1
CVE
CVE
added 2026/03/26 8:3 p.m.4 views

CVE-2026-3528

CVE-2026-3528 is a Drupal Calculation Fields vulnerability (modulename: Calculation Fields) that allows Cross-site Scripting (XSS) due to improper neutralization of input during web page generation. Affected products are Drupal Calculation Fields versions prior to 1.0.4; the issue can lead to XSS...

6.1CVSS5.8AI score0.00013EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2026/03/26 12:0 a.m.2 views

Drupal Calculation Fields 安全漏洞

Drupal Calculation Fields is an extension module developed by Drupal Corporation for field calculations and dynamic data processing. Versions of Drupal Calculation Fields prior to 1.0.4 contained a security vulnerability, which was caused by improper input handling and could lead to cross-site...

6.1CVSS5.6AI score0.00013EPSS
Exploits0References2
Drupal
Drupal
added 2026/03/04 12:0 a.m.8 views

Calculation Fields - Moderately critical - Cross-site Scripting - SA-CONTRIB-2026-023

This module extends the Drupal form API adding "Calculation element" form element types, which can evaluate a maths expression. It offers webform integration. The module doesn't sufficiently validate user input; this could be exploited to achieve Information Disclosure or Cross-site Scripting XSS...

6.1CVSS5.8AI score0.00013EPSS
Exploits0References2
Rows per page
Query Builder