CVE-2026-6871

The Drupal Obfuscate module (versions 0.0.0 through 2.0.1 ) is vulnerable to Cross-Site Scripting (XSS) due to improper neutralization of input during web page generation. The root cause is that the module fails to sufficiently sanitize user input via the Twig filter . This specific vulnerability...