🔐 CVE Alert

CVE-2026-3218

MEDIUM 4.8

Responsive Favicons - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-019

CVSS Score
4.8
EPSS Score
0.0%
EPSS Percentile
8th

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Responsive Favicons allows Cross-Site Scripting (XSS).This issue affects Responsive Favicons: from 0.0.0 before 2.0.2.

CWE CWE-79
Vendor drupal
Product responsive favicons
Ecosystems
Industries
WebMedia
Published Mar 25, 2026
Last Updated Mar 26, 2026
Stay Ahead of the Next One

Get instant alerts for drupal responsive favicons

Be the first to know when new medium vulnerabilities affecting drupal responsive favicons are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

Drupal / Responsive Favicons
0.0.0 < 2.0.2

References

NVD ↗ CVE.org ↗ EPSS Data ↗
drupal.org: https://www.drupal.org/sa-contrib-2026-019

Credits

Simon Bäse (simonbaese) Frank Mably (mably) Sean Hamlin (wiifm) Greg Knaddison (greggles) Juraj Nemec (poker10) Jess (xjm)