Skip to content
OpenAdvisories

Product · Drupal

Zero Point

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.1
    CVE-2026-114528

    Zero Point - Critical - Cross-site scripting - SA-CONTRIB-2026-222

    Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Zero Point allows Stored XSS. This issue affects Zero Point versions: from 0.0.0 to 1.30.0, from 2.0.0 to 2.0.1.

    Drupal Zero Point drupal/zeropoint Packagist