🔐 CVE Alert

CVE-2026-15082

MEDIUM 5.4

Siteimprove Analytics - Moderately critical - Cross-site Scripting - SA-CONTRIB-2026-073

CVSS Score
5.4
EPSS Score
0.2%
EPSS Percentile
8th

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Siteimprove Analytics allows Cross-Site Scripting (XSS). This issue affects Siteimprove Analytics versions: from 0.0.0 to 2.0.1.

CWE CWE-79
Vendor drupal
Product siteimprove analytics
Ecosystems
Industries
WebMedia
Published Jul 10, 2026
Last Updated Jul 13, 2026
Stay Ahead of the Next One

Get instant alerts for drupal siteimprove analytics

Be the first to know when new medium vulnerabilities affecting drupal siteimprove analytics are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

Drupal / Siteimprove Analytics
0.0.0 < 2.0.1

References

NVD ↗ CVE.org ↗ EPSS Data ↗
drupal.org: https://www.drupal.org/sa-contrib-2026-073

Credits

Pierre Rudloff (prudloff) Bohdan Artemchuk (bohart) Andriy Parkhomiuk (grask0) Greg Knaddison (greggles) Pierre Rudloff (prudloff)