🔐 CVE Alert

CVE-2026-107264

UNKNOWN 0.0

Inline Formatter Field - Moderately critical - Server-side template injection - SA-CONTRIB-2026-203

CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th

Improper Neutralization of Special Elements Used in a Template Engine vulnerability in Drupal Inline Formatter Field allows Code Injection. This issue affects Inline Formatter Field versions: from 0.0.0 to 4.2.0.

CWE CWE-1336
Vendor drupal
Product inline formatter field
Ecosystems
Industries
WebMedia
Published Oct 30, 2026
Stay Ahead of the Next One

Get instant alerts for drupal inline formatter field

Be the first to know when new unknown vulnerabilities affecting drupal inline formatter field are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

Drupal / Inline Formatter Field
0.0.0 < 4.2.0

References

NVD ↗ CVE.org ↗ EPSS Data ↗
drupal.org: https://www.drupal.org/sa-contrib-2026-203

Credits

Marcus Johansson (marcus_johansson) Bobby Saul (bobbysaul) Swan Kalata (akalata) Greg Knaddison (greggles) Juraj Nemec (poker10)