CVE-2026-107306

Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Menu Link Attributes allows Stored XSS. This issue affects Menu Link Attributes versions: from 0.0.0 to 1.8.0...

CVE-2026-107306

The Menu Link Attributes module for Drupal (versions 0.0.0 to 1.8.0 ) is vulnerable to Stored Cross-site Scripting (XSS) due to insufficient sanitization of HTML attributes applied to menu link container elements (). To exploit this, an attacker must possess the permissions "Administer menus and ...

EUVD-2026-113566

Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Menu Link Attributes allows Stored XSS. This issue affects Menu Link Attributes versions: from 0.0.0 to 1.8.0...

Menu Link Attributes - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-209

This module enables you to add HTML attributes to menu links and their container elements . The module doesn't sufficiently sanitize the attributes it applies to menu link container elements. This vulnerability is mitigated by the fact that an attacker must have a role with the permissions...

PT-2026-107760

This module enables you to add HTML attributes to menu links and their container elements . The module doesn't sufficiently sanitize the attributes it applies to menu link container elements. This vulnerability is mitigated by the fact that an attacker must have a role with the permissions...