CVE-2026-114528

Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Zero Point allows Stored XSS. This issue affects Zero Point versions: from 0.0.0 to 1.30.0, from 2.0.0 to 2.0.1...

CVE-2026-114528

The ZeroPoint theme for Drupal (versions 0.0.0 to 1.30.0 and 2.0.0 to 2.0.1 ) is vulnerable to a Stored Cross-site Scripting (XSS) flaw. The root cause is the improper sanitization of menu link titles before they are inserted into HTML class attributes . Exploitation requires the attacker to have...

EUVD-2026-113550

Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Zero Point allows Stored XSS. This issue affects Zero Point versions: from 0.0.0 to 1.30.0, from 2.0.0 to 2.0.1...

PT-2012-6041

Name of the Vulnerable Software and Affected Versions Drupal Zero Point module versions 6.x-1.x before 6.x-1.18 Drupal Zero Point module versions 7.x-1.x before 7.x-1.4 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via the pa...