Entity Browser Project

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Entity Browser Project records in CISA KEV

No Entity Browser Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Entity Browser · all components

TI-2026-15515 CVE-2026-18986 · GHSA-h52g-f94f-r87h

LOW 22

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Entity Browser allows Stored XSS.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00242 Published 2026-09-02 Fixed in 2.16.0 CWE-79