Filtered by vendor Drupal Subscriptions
Filtered by product Leaflet Subscriptions
Total 1 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2026-107265 1 Drupal 1 Leaflet 2026-10-31 5.4 Medium
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Leaflet allows Stored XSS. This issue affects Leaflet versions: from 0.0.0 to 10.4.13.