CVE-2026-118575

Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Signature pad widget allows Stored XSS. This issue affects Signature pad widget versions: from 0.0.0 to 1.15.0...

CVE-2026-118575 Signature pad widget - Critical - Cross-site scripting - SA-CONTRIB-2026-285

Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Signature pad widget allows Stored XSS. This issue affects Signature pad widget versions: from 0.0.0 to 1.15.0...

EUVD-2026-113689

Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Signature pad widget allows Stored XSS. This issue affects Signature pad widget versions: from 0.0.0 to 1.15.0...

CVE-2026-118575

The Drupal Signature pad widget (versions 0.0.0 to 1.15.0 ) is vulnerable to Stored Cross-site Scripting (XSS) . The root cause is insufficient sanitization of user-supplied content before saving it to the public file system. Specifically, the module allows users to create and save signatures as ...

CVE-2026-118575: Drupal Signature pad widget: Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Signature…

Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Signature pad widget allows Stored XSS. This issue affects Signature pad widget versions: from 0.0.0 to 1.15.0...

Signature pad widget - Critical - Cross-site scripting - SA-CONTRIB-2026-285

This module enables users to create and save signatures as SVG images. The module did not sufficiently sanitize user-supplied content before saving it to the public file system. Under certain scenarios, a maliciously crafted file could contain active or otherwise unsafe content and may result in ...