EUVD-2026-15479

Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Responsive Favicons allows Cross-Site Scripting XSS.This issue affects Responsive Favicons: from 0.0.0 before 2.0.2...

CVE-2026-3218

The Drupal Responsive Favicons module is vulnerable to a persistent Cross-Site Scripting (XSS) flaw due to the improper neutralization of input during web page generation. The root cause is that the module fails to filter administrator-entered text , which allows an attacker to inject malicious s...