Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

8 records

Release: Drupal AI (Artificial Intelligence) 1.4.11, 1.5.2 Clear all filters
TI-2026-82895 CVE-2026-118545 · GHSA-pp99-hc42-m4m6

Cross-site scripting in Drupal AI (Artificial Intelligence)

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal AI (Artificial Intelligence) allows Cross-Site Scripting (XSS).

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00171 Published 2026-10-30 Fixed in 1.4.11, 1.5.2 CWE-79
TI-2026-82896 CVE-2026-118546 · GHSA-qhrr-44xm-23mv

Cross-site scripting in Drupal AI (Artificial Intelligence) module

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal AI (Artificial Intelligence) allows Cross-Site Scripting (XSS).

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00171 Published 2026-10-30 Fixed in 1.4.11, 1.5.2 CWE-79
TI-2026-82898 CVE-2026-118549 · GHSA-vpqw-q8pp-q4hc

Cross-site scripting in Drupal AI (Artificial Intelligence) module

Priority LOW 30

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal AI (Artificial Intelligence) allows Cross-Site Scripting (XSS).

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00191 Published 2026-10-30 Fixed in 1.4.11, 1.5.2 CWE-79
TI-2026-82899 CVE-2026-118550 · GHSA-jqpj-2gpx-ffr5

Sensitive data cached in browser in Drupal AI module

Priority LOW 26

Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal AI (Artificial Intelligence) allows Exploiting Incorrectly Configured Access Control Security Levels.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00332 Published 2026-10-30 Fixed in 1.4.11, 1.5.2 CWE-525
TI-2026-82900 CVE-2026-118551 · GHSA-c2vh-345q-88w5

Insecure storage in Drupal AI module exposes embedded sensitive data

Priority LOW 14

Insecure Storage of Sensitive Information vulnerability in Drupal AI (Artificial Intelligence) allows Retrieve Embedded Sensitive Data.

CVSS 3.1LOW 3.1 Network Low privileges No interaction EPSS 0.00186 Published 2026-10-30 Fixed in 1.4.11, 1.5.2 CWE-922
TI-2026-82901 CVE-2026-118552 · GHSA-hr78-8gcj-h9jm

Cross-site scripting in Drupal AI (Artificial Intelligence) module

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal AI (Artificial Intelligence) allows Cross-Site Scripting (XSS).

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00171 Published 2026-10-30 Fixed in 1.4.11, 1.5.2 CWE-79
TI-2026-82902 CVE-2026-118553 · GHSA-f5wg-73hh-cq5r

Stored cross-site scripting in Drupal AI (Artificial Intelligence)

Priority LOW 24

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal AI (Artificial Intelligence) allows Stored XSS.

CVSS 3.1MEDIUM 5.5 Network Low privileges User interaction EPSS 0.00145 Published 2026-10-30 Fixed in 1.4.11, 1.5.2 CWE-79