CVE-2026-107308

The Country module for Drupal (versions 0.0.0 to 2.1.3 and 2.2.0 to 2.2.1) is vulnerable to Cross-Site Scripting (XSS) . The root cause is the insufficient escaping of user input within the module's autocomplete widget . While the vulnerability exists, it cannot occur out of the box; it requires ...

EUVD-2026-113564

Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Country allows Cross-Site Scripting XSS. This issue affects Country versions: from 0.0.0 to 2.1.3, from 2.2.0 to 2.2.1...