CVE-2026-2349

The Drupal UI Icons module is vulnerable to a reflected Cross-Site Scripting (XSS) flaw due to insufficient sanitization of user input. This vulnerability specifically affects versions 0.0.0 before 1.0.1 and 1.1.0 before 1.1.1 . Practical exploitation is mitigated by the requirement that the "UI ...