Vulnerability advisory
BIT-drupal-2026-55808
Drupal core - Moderately critical - Improper validation - SA-CORE-2026-009
Also known as CVE-2026-55808DRUPAL-CORE-2026-009
Severity
Severity not reported.
Affected versions
drupal Bitnami
| Affected | Fixed in |
|---|---|
| All versions before 10.5.12 | 10.5.12 |
10.6.0 to before 10.6.11 | 10.6.11 |
11.0.0 to before 11.2.14 | 11.2.14 |
11.3.0 to before 11.3.12 | 11.3.12 |
Severity for this package
| |
Description
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Drupal core allows Cross-Site Scripting (XSS). This issue affects Drupal core versions: from 0.0.0 to 10.5.12, from 10.6.0 to 10.6.11, from 11.2.0 to 11.2.14, from 11.3.0 to 11.3.12, from 0.0.0 to 11.0., from 0.0.0 to 11.1..