TI-2026-00535 CVE-2026-0749 · GHSA-fw4r-9q4w-pxx8Cross-Site Scripting Vulnerability in Drupal Form Builder ModulePriority LOW 22Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Form Builder allows Cross-Site Scripting (XSS).This issue affects Drupal: from 7.X-1.0 through 7.X-1.22.CVSS 4.0MEDIUM 4.8· Network · Low privileges · User interaction · EPSS 0.00232 · Published 2026-01-28 · No fix listed CWE-79