Skip to content
OpenAdvisories

Product · Drupal

Country

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 3.1
    CVE-2026-107308

    Country - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-211

    Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Country allows Cross-Site Scripting (XSS). This issue affects Country versions: from 0.0.0 to 2.1.3, from 2.2.0 to 2.2.1.

    Drupal Country drupal/country Packagist