CVE-2026-107265

Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Leaflet allows Stored XSS. This issue affects Leaflet versions: from 0.0.0 to 10.4.13...

CVE-2026-107265

The Drupal Leaflet module (versions 0.0.0 to 10.4.13 ) is vulnerable to a Stored Cross-Site Scripting (XSS) vulnerability. The root cause is that the Leaflet field formatter fails to filter content titles when building a map. This allows an attacker with sufficient permissions to create or edit c...

CVE-2026-107265 Leaflet - Moderately critical - Cross site scripting - SA-CONTRIB-2026-204

Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Leaflet allows Stored XSS. This issue affects Leaflet versions: from 0.0.0 to 10.4.13...

EUVD-2026-113571

Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Leaflet allows Stored XSS. This issue affects Leaflet versions: from 0.0.0 to 10.4.13...

CVE-2026-107265 Leaflet - Moderately critical - Cross site scripting - SA-CONTRIB-2026-204

Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Leaflet allows Stored XSS. This issue affects Leaflet versions: from 0.0.0 to 10.4.13...