CVE-2026-10770

The Anti-Spam by CleanTalk module for Drupal versions 0.0.0 through 9.7.1 is vulnerable to Reflected Cross-site Scripting (XSS) . The root cause is the failure to sufficiently sanitize API response messages before rendering them in HTML output, specifically within the _cleantalk_die() and ct_die(...