CVE-2026-114536

Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal USWDS Paragraph Components allows Stored XSS. This issue affects USWDS Paragraph Components versions: from 0.0.0 to 3.1.3...

CVE-2026-114536

The Drupal USWDS Paragraph Components module (versions 0.0.0 to 3.1.3 ) is vulnerable to Stored Cross-site Scripting (XSS) . The root cause is that the module's twig templates do not sufficiently sanitize values passed to its markup. While the vulnerability allows for XSS, its impact is mitigated...

EUVD-2026-113538

Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal USWDS Paragraph Components allows Stored XSS. This issue affects USWDS Paragraph Components versions: from 0.0.0 to 3.1.3...