🔐 CVE Alert

CVE-2026-118575

UNKNOWN 0.0

Signature pad widget - Critical - Cross-site scripting - SA-CONTRIB-2026-285

CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Signature pad widget allows Stored XSS. This issue affects Signature pad widget versions: from 0.0.0 to 1.15.0.

CWE CWE-79
Vendor drupal
Product signature pad widget
Ecosystems
Industries
WebMedia
Published Oct 30, 2026
Stay Ahead of the Next One

Get instant alerts for drupal signature pad widget

Be the first to know when new unknown vulnerabilities affecting drupal signature pad widget are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

Drupal / Signature pad widget
0.0.0 < 1.15.0

References

NVD ↗ CVE.org ↗ EPSS Data ↗
drupal.org: https://www.drupal.org/sa-contrib-2026-285

Credits

Marcus Johansson (marcus_johansson) Ra Mänd (ram4nd) Joseph Olstad (joseph.olstad) Marcus Johansson (marcus_johansson) Ra Mänd (ram4nd) Swan Kalata (akalata) Greg Knaddison (greggles) Heine Deelstra (heine) Juraj Nemec (poker10)