Vulnerabilities

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Menu Link Attributes allows Stored XSS.

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Menu Link Attributes allows Stored XSS. This issue affects Menu Link Attributes versions: from 0.0.0 to 1.8.0.

Read at NIST National Vulnerability Database (CVE API 2.0)

Vendor

Drupal

Product

Menu Link Attributes

Weakness

CWE-79

Exposure class

Web platform

NVD status

Received

• NIST National Vulnerability Database (CVE API 2.0) (nvd.nist.gov)
• CVE-2026-107306 on this site · NVD · CVE.org · Vulnpedia

Other items that share a CVE or were clustered with this one.

1. 7
   CVE NVD 4d ago

   Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Stage File Proxy allows Cross-Site…

   CVE-2026-118576 Drupal
2. 7
   CVE NVD 4d ago

   Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Signature pad widget allows Stored XSS.

   CVE-2026-118575 Drupal
3. 7
   CVE NVD 4d ago

   Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Commerce Stripe allows Cross-Site…

   CVE-2026-118560 Drupal
4. 7
   CVE NVD 4d ago

   Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal AI (Artificial Intelligence) allows…

   CVE-2026-118553 Drupal
5. 7
   CVE NVD 4d ago

   Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal AI (Artificial Intelligence) allows…

   CVE-2026-118552 Drupal
6. 7
   CVE NVD 4d ago

   Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal AI (Artificial Intelligence) allows…

   CVE-2026-118549 Drupal
7. 7
   CVE NVD 4d ago

   Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal AI (Artificial Intelligence) allows…

   CVE-2026-118546 Drupal
8. 7
   CVE NVD 4d ago

   Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal AI (Artificial Intelligence) allows…

   CVE-2026-118545 Drupal
9. 7
   CVE NVD 4d ago

   Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Data field allows Stored XSS.

   CVE-2026-114555 Drupal
10. 7
    CVE NVD 4d ago

    Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Bootstrap allows Cross-Site Scripting…

    CVE-2026-114538 Drupal
11. 7
    CVE NVD 4d ago

    Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal USWDS Paragraph Components allows Stored…

    CVE-2026-114536 Drupal
12. 7
    CVE NVD 4d ago

    Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Block Attributes allows Stored XSS.

    CVE-2026-114534 Drupal
13. 7
    CVE NVD 4d ago

    Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal UI Icons allows Cross-Site Scripting…

    CVE-2026-114532 Drupal
14. 7
    CVE NVD 4d ago

    Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Swiper formatter allows Stored XSS.

    CVE-2026-114531 Drupal
15. 7
    CVE NVD 4d ago

    Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal CSV Field allows Stored XSS.

    CVE-2026-114529 Drupal
16. 7
    CVE NVD 4d ago

    Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Zero Point allows Stored XSS.

    CVE-2026-114528 Drupal
17. 7
    CVE NVD 4d ago

    Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal UI Icons allows Cross-Site Scripting…

    CVE-2026-114527 Drupal
18. 7
    CVE NVD 4d ago

    Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Black Hole allows Stored XSS.

    CVE-2026-114526 Drupal
19. 7
    CVE NVD 4d ago

    Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal ABC allows Stored XSS.

    CVE-2026-114525 Drupal
20. 7
    CVE NVD 4d ago

    Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Gin Admin Theme allows Cross-Site…

    CVE-2026-110738 Drupal