CVE-2026-3528

The Drupal Calculation Fields module, an extension for field calculations and dynamic data processing, is vulnerable to Cross-Site Scripting (XSS) and Information Disclosure in versions prior to 1.0.4 . The root cause is insufficient input validation of user-supplied data within the "Calculation ...