Drupal Leaflet vulnerabilities (CVE)

CVE records published for Drupal Leaflet, newest first. Follow to get an email when a new one appears.

1 results

5.4Medium

CVE-2026-107265 13 days ago

Leaflet - Moderately critical - Cross site scripting - SA-CONTRIB-2026-204

Drupal Leaflet

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Leaflet allows Stored XSS. This issue affects Leaflet versions: from 0.0.0 to 10.4.13.