htmLawed - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-315

The htmLawed module enables use of the htmLawed PHP library as a filter in a Text Format for restriction/filtering of HTML in textual input. The htmLawed filter does not sufficiently filter attributes, leading to a cross-site scripting XSS vulnerability. This vulnerability affects sites on Drupal...