CVE-2026-114529

Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal CSV Field allows Stored XSS. This issue affects CSV Field versions: from 0.0.0 to 2.0.10, from 3.0.0 to 3.0.7...

EUVD-2026-113546

Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal CSV Field allows Stored XSS. This issue affects CSV Field versions: from 0.0.0 to 2.0.10, from 3.0.0 to 3.0.7...

CVE-2026-114529

The CSV Field module for Drupal is vulnerable to a Stored Cross-site Scripting (XSS) vulnerability in versions 0.0.0 to 2.0.10 and 3.0.0 to 3.0.7 . The root cause is the failure to sufficiently escape CSV cell and header values before they are passed to the DataTables library . This allows an att...