CVE-2026-15917

CVE-2026-15917 is a Cross-Site Scripting (XSS) vulnerability in Drupal core 11.2 and above, caused by insufficient sanitization of certain HTMX JavaScript library attributes by Drupal's XSS filter. Drupal core 11.2+ integrates HTMX, and the filter fails to properly neutralize specific HTMX attrib...