Skip to content
OpenAdvisories

Product · Drupal

Leaflet

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.4
    CVE-2026-107265

    Leaflet - Moderately critical - Cross site scripting - SA-CONTRIB-2026-204

    Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Leaflet allows Stored XSS. This issue affects Leaflet versions: from 0.0.0 to 10.4.13.

    Drupal Leaflet drupal/leaflet Packagist