CVE-2026-96392

The Drupal AI CKEditor module is vulnerable to Code Injection due to improper neutralization of special elements used in a template engine. This flaw exists because the module fails to sufficiently mitigate Twig template injections within specific AI CKEditor rules. Affected versions range from 0...

EUVD-2026-107814

Improper Neutralization of Special Elements Used in a Template Engine vulnerability in Drupal AI CKEditor allows Code Injection. This issue affects AI CKEditor versions: from 0.0.0 to 1.4.3...