CVE-2026-6871

Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Obfuscate allows Cross-Site Scripting XSS. This issue affects Obfuscate: from 0.0.0 before 2.0.2...

CVE-2026-6871

The Drupal Obfuscate module (versions 0.0.0 through 2.0.1 ) is vulnerable to Cross-Site Scripting (XSS) due to improper neutralization of input during web page generation. The root cause is that the module fails to sufficiently sanitize user input via the Twig filter . This specific vulnerability...