🔐 CVE Alert

CVE-2026-84915

UNKNOWN 0.0

Component blocks - Moderately critical - Cross site scripting - SA-CONTRIB-2026-123

CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Component blocks allows Stored XSS. This issue affects Component blocks versions: from 0.0.0 to 1.2.7.

CWE CWE-79
Vendor drupal
Product component blocks
Ecosystems
Industries
WebMedia
Published Oct 22, 2026
Stay Ahead of the Next One

Get instant alerts for drupal component blocks

Be the first to know when new unknown vulnerabilities affecting drupal component blocks are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

Drupal / Component blocks
0.0.0 < 1.2.7

References

NVD ↗ CVE.org ↗ EPSS Data ↗
drupal.org: https://www.drupal.org/sa-contrib-2026-123

Credits

Marcus Johansson (marcus_johansson) Lee Rowlands (larowlan) Greg Knaddison (greggles) Lee Rowlands (larowlan)