CVE-2026-118545None▾ SunlitImproper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal AI (Artificial Intelligence) allows Cross-Site Scripting (XSS). This issue affects AI (Artificial Intelligence) versions: from 0…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 2.8 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Nov 3.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
0.2%
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal AI (Artificial Intelligence) allows Cross-Site Scripting (XSS). This issue affects AI (Artificial Intelligence) versions: from 0.0.0 to 1.4.11, from 1.5.0 to 1.5.2.
ai_artificial_intelligence >= 0.0.0 < 1.4.11ai_artificial_intelligence >= 1.5.0 < 1.5.2Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-118549NoneAI (Artificial Intelligence) - Critical - Cross-site scripting - SA-CONTRIB-2026-269
CVE-2026-118546NoneAI (Artificial Intelligence) - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-267
CVE-2026-118552NoneAI (Artificial Intelligence) - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-272
CVE-2026-118553NoneAI (Artificial Intelligence) - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-273
CVE-2026-84911Low· 3.1AI (Artificial Intelligence) - Moderately critical - Cross site scripting - SA-CONTRIB-2026-119
CVE-2026-108515NoneDrupal core - Moderately critical - Cross-site scripting - SA-CORE-2026-015